CVE-2026-55112

High · 7.5

CVSS

7.5

EPSS

—

Published

Jul 2, 2026

CISA due date

—

The record

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

Affected packages

Ecosystem	Package	Introduced	Fixed