CVE-2026-110456: Medium severity Ubiquiti UniFi Protect AI Key vulnerability
Published Oct 14, 2026
·Updated
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
Affected Software
1 affected component
Ubiquiti UniFi Protect AI Key
Event History
Oct 14, 2026
CVE Published
via MITRE·05:06 AM
Data Sourced
via MITRE·05:06 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is exploitable by a malicious actor with network access, under certain unspecified conditions. No privileges or user interaction are required according to the provided severity vector.
2
What could an attacker access if exploitation succeeds?
Successful exploitation could allow access to internal resources through the UniFi Protect AI Key. The provided information does not identify which internal resources are reachable or what additional access controls may limit them.