CVE-2026-54408: Critical severity Ubiquiti Unifi Protect Application vulnerability
Published Jul 2, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.
Affected Software
2 affected components
Ubiquiti Unifi Protect Application
UI Unifi Protect<7.1.83
Event History
Jul 2, 2026
CVE Published
via MITRE·02:49 PM
Data Sourced
via MITRE·02:49 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-54408?
CVE-2026-54408 has a severity rating of 8.6, classified as high.
2
How does CVE-2026-54408 affect the Ubiquiti UniFi Protect Application?
CVE-2026-54408 allows a malicious actor with network access to bypass authentication for data streaming.
3
Who is at risk from CVE-2026-54408?
Individuals using the Ubiquiti UniFi Protect Application are at risk if their network is compromised.
4
What should I do to mitigate CVE-2026-54408?
To mitigate CVE-2026-54408, ensure that your Ubiquiti UniFi Protect Application is updated to the latest version.
5
Can CVE-2026-54408 be exploited remotely?
No, CVE-2026-54408 requires network access for exploitation.