CVE-2026-55112highCWE-284

CVE-2026-55112: high-severity vulnerability in Ubiquiti Inc Cloud Gateways

Published

Follow this CVE+ Monitor Cloud Gateways+ Monitor Dream Machines

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.4%
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Ubiquiti Inc · Cloud GatewaysUbiquiti Inc · Cloud KeysUbiquiti Inc · Dream MachinesUbiquiti Inc · Dream RoutersUbiquiti Inc · Dream WallUbiquiti Inc · Enterprise Video RecordersUbiquiti Inc · Network Video Recorders
Related CVEs — Ubiquiti Inc Cloud Gateways

In the same product, most dangerous first.

CVE-2026-54402CRITICALCVE-2026-54402EPSS 1.8%CVE-2026-77550CRITICALCVE-2026-77550EPSS 0.8%CVE-2026-54403HIGHCVE-2026-54403EPSS 0.8%CVE-2026-77558HIGHCVE-2026-77558EPSS 0.5%CVE-2026-77556HIGHCVE-2026-77556EPSS 0.5%CVE-2026-77544HIGHCVE-2026-77544EPSS 0.5%