CVE-2026-110455: Input Validation
Published Oct 14, 2026
·Updated
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
Affected Software
1 affected component
Ubiquiti UniFi Protect AI Key
Event History
Oct 14, 2026
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this vulnerability?
UniFi Protect AI Key devices that are reachable by a malicious actor over the network are potentially exposed. The advisory states that exploitation also depends on unspecified conditions being met.
2
Does exploitation require authentication or user interaction?
The supplied vector indicates no privileges are required and no user interaction is required. Exploitation is network-based, but has high attack complexity.
3
What could an attacker achieve if exploitation succeeds?
A successful exploit could allow command injection on the affected device. The severity vector indicates potential high impact to confidentiality, integrity, and availability.