CVE-2026-110454
MediumCVSS 5.3Summary
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
Risk Assessment
An attacker with network access could use the device to reach internal organizational resources, creating a risk of unauthorized data access and further attacks.
Recommendation
Update UniFi Protect AI Key to the latest firmware and restrict network access to the device to trusted network segments only.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-110456Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
- CVE-2026-110455High
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS