CVE-2026-56842
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
An Incorrect Authorization vulnerability in UniFi Network Application allows a malicious actor with network access to persist privileges after such access has been removed, under certain conditions.
Risk Assessment
The organization faces risk of unauthorized access and privilege escalation, potentially leading to breach of confidentiality and integrity of the managed network.
Recommendation
Immediately update UniFi Network Application to the latest patched version and restrict network access to the application to trusted hosts only.
Other vulnerabilities in UniFi Network Application
See all- CVE-2026-77541Critical
An attacker with network access and high privileges can exploit an improper access control vulnerability in the UniFi Network Application to escalate privileges within the application.
- CVE-2026-77535Critical
An attacker with network access and high privileges could exploit an Improper Input Validation vulnerability in UniFi Network Application to execute a Command Injection on an adopted device.
- CVE-2026-55118High
A vulnerability in UniFi Network Application allows privilege escalation by an attacker with network access and low privileges, under certain conditions. The issue stems from improper access control.
- CVE-2026-55114High
A vulnerability in UniFi Network Application allows an attacker with network access and low privileges to escalate privileges through improper access control.
- CVE-2026-54406High
A Path Traversal vulnerability in self-hosted instances of UniFi Network Application allows an attacker with network access and high privileges to escalate write permissions on the host device.
- CVE-2026-54405High
A vulnerability in UniFi Network Application allows an attacker with network access to execute a Denial of Service (DoS) attack through improper input validation.
Original NVD description (English source)
A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS