CVE-2026-55112

HighCVSS 8.8/10Last modified Jul 10, 2026

Description

A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jul 2, 2026
Last modified: Jul 10, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-551137.5A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Applicatio CVE-2026-551148.8A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Networ CVE-2026-551159.9A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Applicat CVE-2026-551169.8A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability CVE-2026-551178.6A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files CVE-2026-551188.3A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerabil CVE-2026-551198.1A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk A CVE-2026-55124.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the n CVE-2026-551207.8Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-551215.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-551227.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-551237.8Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.