CVE-2026-110456
MediumCVSS 5.3Summary
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
Risk Assessment
An attacker with network access could use the device as an entry point to internal organizational resources, potentially leading to unauthorized data access or further lateral movement.
Recommendation
Update UniFi Protect AI Key to the latest firmware and restrict network access to the device to trusted network segments only.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-110455High
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
Original NVD description (English source)
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS