CVE-2026-55119

HighCVSS 8.1/10Last modified Oct 25, 2026

Description

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
Ubiquiti IncUniFi Talk Application< 5.2.2

References

Timeline

Published
Jul 2, 2026
Last modified
Oct 25, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-55124.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the nCVE-2026-551207.8Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-551215.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-551227.1Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-551237.8Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-551245.5Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-551257.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-551265.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attCVE-2026-551277.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-551287.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-551297.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55137.2The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'boo
CVE-2026-55119: High severity, CVSS 8.1 | Vulnix