by Kastro
Paper/Archive/CVE-2026-55116

CVE-2026-55116

Ubiquiti Inc Dream Machines — A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerabil…

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 35.5.355 × 207.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Affected

ProductAffectedFixed inSource
Dream Machines< 5.1.195.1.19CNA
Enterprise Fortress Gateway< 5.1.195.1.19CNA
Dream Wall< 5.1.195.1.19CNA
Dream Routers< 5.1.195.1.19CNA
Express 7< 5.1.195.1.19CNA
Cloud Gateways< 5.1.195.1.19CNA
Enterprise Firewall Core< 5.1.195.1.19CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
hackerone (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc