{"id":"CVE-2026-110456","state":"PUBLISHED","title":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal re","description":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","publishedAt":"2026-10-14T05:06:56.170Z","updatedAt":"2026-10-14T17:57:30.697Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"Ubiquiti"},"assigner":"Ubiquiti","products":["Ubiquiti Inc UniFi Protect AI Key"],"affected":[{"vendor":"Ubiquiti Inc","product":"UniFi Protect AI Key","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.2.8","versionType":"semver"}]}],"references":["https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:10:33.477Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/110xxx/CVE-2026-110456.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-110456","state":"PUBLISHED","datePublished":"2026-10-14T05:06:56.170Z","dateUpdated":"2026-10-14T17:57:30.697Z","assignerShortName":"Ubiquiti","assignerOrgId":"fe490ce8-0395-4072-90d8-2707e1bdf984","dateReserved":"2026-10-14T04:16:43.266Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device."}],"affected":[{"vendor":"Ubiquiti Inc","product":"UniFi Protect AI Key","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.2.8","versionType":"semver"}]}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","lang":"en","description":"CWE-284 Improper Access Control","type":"CWE"}]}],"providerMetadata":{"shortName":"Ubiquiti","orgId":"fe490ce8-0395-4072-90d8-2707e1bdf984","dateUpdated":"2026-10-14T05:06:56.170Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-14T17:57:04.408362Z","id":"CVE-2026-110456","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-14T17:57:30.697Z"}}]}}}