CVE-2026-56842

CVSS 7.5 HIGHCWE-863

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS —KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

02 jul 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Ubiquiti Inc · UniFi Network Application

Referencias

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc