CVE-2026-54400: Critical severity Ubiquiti UniFi Access Application vulnerability
Published Jul 2, 2026
·Updated
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
Affected Software
2 affected components
Ubiquiti UniFi Access Application
UI Unifi Access Application<4.2.29
Event History
Jul 2, 2026
CVE Published
via MITRE·02:49 PM
Data Sourced
via MITRE·02:49 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
Jul 8, 2026
News Published
via BleepingComputer·08:15 AM
News Published
via BleepingComputer·08:16 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-54400?
The severity of CVE-2026-54400 is critical with a score of 9.1.
2
How do I fix CVE-2026-54400?
To fix CVE-2026-54400, ensure that you apply the latest security updates for the Ubiquiti UniFi Access Application.
3
What type of vulnerability is CVE-2026-54400?
CVE-2026-54400 is an Improper Access Control vulnerability.
4
Who is affected by CVE-2026-54400?
CVE-2026-54400 affects users of the Ubiquiti UniFi Access Application who have high privileges on the network.
5
What are the risks associated with CVE-2026-54400?
The risks associated with CVE-2026-54400 include potential privilege escalation by a malicious actor with network access.