CVE-2026-55119
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
An Improper Access Control vulnerability in UniFi Talk Application allows privilege escalation. An attacker with network access and low privileges can exploit this flaw.
Risk Assessment
The risk involves potential privilege escalation within the UniFi Talk Application, leading to unauthorized access to sensitive features and data.
Recommendation
Immediately update UniFi Talk Application to the latest version and enforce strict network access controls.
Other vulnerabilities in UniFi Talk Application
See all- CVE-2026-77554Critical
An attacker with network access could exploit an Improper Input Validation vulnerability in UniFi Talk Application to execute a Command Injection on the host device.
- CVE-2026-50747Critical
An authenticated SQL Injection vulnerability in UniFi Talk Application allows a network-accessible attacker with low privileges to escalate privileges on the host device.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.