Back to feed
EUVD-2026-41396 · Published Jul 2, 2026
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Technologies
Ui Unifi Network Video Recorder Pro FirmwareUi Unifi Dream Machine Special EditionUi Enterprise Network Video Recorder CoreUi Unifi Network Video Recorder Instant FirmwareUi Unifi Cloud Gateway FiberUi Unifi Dream Machine Pro MaxUi Unifi Network Video Recorder G2 Pro FirmwareUi Unifi Cloud Gateway IndustrialUi Unifi Network Video Recorder ProUi Unifi Network Video Recorder InstantUi Unifi Dream Machine ProUi Unifi Dream Router 7 FirmwareUi Unifi Network Video RecorderUi Unifi Cloud Gateway MaxUi Unifi Dream Router 5G MaxUi Unifi Dream Machine Pro FirmwareUi Enterprise Network Video Recorder FirmwareUi Unifi Dream Machine Beast FirmwareUi Unifi Dream Router FirmwareUi Unifi Dream Machine BeastUi Unifi Dream Machine Pro Max FirmwareUi Unifi Dream WallUi Unifi Network Video Recorder FirmwareUi Unifi Dream RouterUi Unifi Dream Machine Special Edition FirmwareUi Unifi Network Video Recorder G2 ProUi Enterprise Network Video RecorderUi Unifi Cloud Gateway Fiber FirmwareUi Enterprise Network Video Recorder Core FirmwareUi Unifi Network Video Recorder G2 FirmwareUi Unifi Cloud Gateway Industrial FirmwareUi Unifi Dream Router 7Ui Unifi Dream Wall FirmwareUi Unifi Cloud Gateway Max FirmwareUi Unifi Dream Router 5G Max FirmwareUi Unifi CloudkeyUi Unifi Cloudkey FirmwareUi Unifi Network Video Recorder G2
Weaknesses
CWE-284NVD-CWE-Other
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
