CVE-2026-110459
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A malicious actor with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
Risk Assessment
A network-based attacker can access information, modify configuration, and cause a denial of service on the UniFi Protect AI Key device. This may disrupt surveillance operations and breach data confidentiality.
Recommendation
Update the UniFi Protect AI Key software to the latest version containing the fix. Restrict network access to the device and segment the network to reduce exploitation risk.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
- CVE-2026-110458Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to create or truncate files on the device under certain conditions.
- CVE-2026-110457Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to obtain information about files on the device under certain conditions.
- CVE-2026-110456Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
- CVE-2026-110455High
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS