CVE-2026-55110
High · 7.5CVSS
7.5
EPSS
—
Published
Jul 2, 2026
CISA due date
—
The record
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|