{"id":"CVE-2026-55116","state":"PUBLISHED","title":"A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi ","description":"A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.","publishedAt":"2026-07-02T14:50:48.820Z","updatedAt":"2026-07-02T15:51:11.890Z","severity":{"score":9,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"hackerone"},"assigner":"hackerone","products":["Ubiquiti Inc Dream Machines","Ubiquiti Inc Enterprise Fortress Gateway","Ubiquiti Inc Dream Wall","Ubiquiti Inc Dream Routers","Ubiquiti Inc Express 7","Ubiquiti Inc Cloud Gateways","Ubiquiti Inc Enterprise Firewall Core"],"affected":[{"vendor":"Ubiquiti Inc","product":"Dream Machines","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Enterprise Fortress Gateway","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Dream Wall","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Dream Routers","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Express 7","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Cloud Gateways","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Enterprise Firewall Core","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]}],"references":["https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:12:24.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/55xxx/CVE-2026-55116.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-55116","state":"PUBLISHED","datePublished":"2026-07-02T14:50:48.820Z","dateUpdated":"2026-07-02T15:51:11.890Z","assignerShortName":"hackerone","assignerOrgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","dateReserved":"2026-06-16T15:00:01.614Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices."}],"affected":[{"vendor":"Ubiquiti Inc","product":"Dream Machines","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Enterprise Fortress Gateway","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Dream Wall","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Dream Routers","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Express 7","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Cloud Gateways","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]},{"vendor":"Ubiquiti Inc","product":"Enterprise Firewall Core","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.19","versionType":"semver"}]}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9,"baseSeverity":"CRITICAL"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"CWE-284 Improper Access Control - Generic"}]}],"providerMetadata":{"shortName":"hackerone","orgId":"36234546-b8fa-4601-9d6f-f4e334aa8ea1","dateUpdated":"2026-07-02T14:50:48.820Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-02T15:41:23.595428Z","id":"CVE-2026-55116","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-02T15:51:11.890Z"}}]}}}