CVE-2026-54400
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A vulnerability in UniFi Access Application allows privilege escalation on the host device. An attacker with network access and high privileges can exploit improper access control.
Risk Assessment
The risk involves potential full compromise of the host device, leading to data confidentiality and integrity breaches and further network attacks.
Recommendation
Immediately update UniFi Access Application to the latest version and restrict network access to the system to trusted hosts only.
Other vulnerabilities in UniFi Access Application
See all- CVE-2026-77553Critical
An attacker with network access and low privileges could exploit an Improper Access Control vulnerability in UniFi Access Application to escalate privileges on the host device.
- CVE-2026-77547Critical
An attacker with network access and low privileges could exploit an Improper Input Validation vulnerability in UniFi Access Application to execute a Command Injection on the host device.
- CVE-2026-77546Critical
An attacker with network access and low privileges could exploit an Improper Input Validation vulnerability in UniFi Access Application to execute a Command Injection on the host device.
- CVE-2026-77543Critical
An attacker with network access and low privileges can exploit an improper input validation vulnerability in the UniFi Access Application to execute a command injection on the host device.
- CVE-2026-50748Critical
A vulnerability in the UniFi Access Application allows an attacker with network access and low privileges to execute command injection on the host device due to improper input validation.
- CVE-2026-55117High
A Path Traversal vulnerability in UniFi Access Application allows a malicious actor with network access to read files on the host device.
Original NVD description (English source)
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS