CVE-2026-110459: High severity Ubiquiti UniFi Protect AI Key vulnerability
Published Oct 14, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
Affected Software
1 affected component
Ubiquiti UniFi Protect AI Key
Event History
Oct 14, 2026
CVE Published
via MITRE·05:19 AM
Data Sourced
via MITRE·05:19 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed?
UniFi Protect AI Key devices that are reachable by a malicious actor over the network are exposed. The advisory data does not limit exposure to a particular deployment type or network location.
2
Does exploitation require credentials or user interaction?
No. The CVSS vector indicates that exploitation can be performed over the network with low attack complexity, requires no privileges, and requires no user interaction.
3
What could an attacker do after exploiting the issue?
An attacker could obtain information, make unauthorized changes, and cause a denial of service on the affected device.