CVE-2026-54400
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A vulnerability in UniFi Access Application allows privilege escalation on the host device. An attacker with network access and high privileges can exploit improper access control.
Risk Assessment
The risk involves potential full compromise of the host device, leading to data confidentiality and integrity breaches and further network attacks.
Recommendation
Immediately update UniFi Access Application to the latest version and restrict network access to the system to trusted hosts only.
Original NVD description (English source)
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

