CVE-2026-55115

CriticalCVSS 9.9

Published: 02/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

An SSRF vulnerability in UniFi Protect Application allows an attacker with network access and low privileges to escalate privileges on the host device.

Risk Assessment

An attacker could gain elevated privileges, leading to full system compromise and potential access to sensitive data.

Recommendation

Immediately update UniFi Protect Application to the latest version that fixes this vulnerability. Restrict network access to the application to trusted hosts only.

Original NVD description (English source)

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.