CVE-2026-110455
HighCVSS 8.1Summary
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
Risk Assessment
An attacker with network access can execute arbitrary commands on the device, potentially leading to device compromise and possibly the entire infrastructure.
Recommendation
Update UniFi Protect AI Key firmware to the latest patched version. Restrict network access to the device and monitor for suspicious activity.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-110456Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
Original NVD description (English source)
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS