CVE-2026-55112: High severity UniFi OS vulnerability
Published Jul 2, 2026
·Updated
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
Affected Software
40 affected components
UniFi OS
UniFi Protect Application
All of the following
UI Unifi Dream Machine Pro Firmware<=5.1.15
UI UniFi Dream Machine Pro
All of the following
UI Unifi Dream Machine Special Edition Firmware<=5.1.15
UI Unifi Dream Machine Special Edition
All of the following
UI Unifi Dream Machine Pro Max Firmware<=5.1.15
UI Unifi Dream Machine Pro Max
All of the following
UI Unifi Dream Machine Beast Firmware<=5.1.15
UI Unifi Dream Machine Beast
All of the following
UI Unifi Dream Router Firmware<=5.1.15
UI Unifi Dream Router
All of the following
UI Unifi Dream Wall Firmware<=5.1.15
UI Unifi Dream Wall
All of the following
UI Unifi Dream Router 7 Firmware<=5.1.15
UI Unifi Dream Router 7
All of the following
UI Unifi Cloudkey Firmware<=5.1.15
UI Unifi Cloudkey
All of the following
UI Unifi Network Video Recorder Firmware<=5.1.15
UI Unifi Network Video Recorder
All of the following
UI Unifi Network Video Recorder Pro Firmware<=5.1.15
UI Unifi Network Video Recorder Pro
All of the following
UI Unifi Network Video Recorder Instant Firmware<=5.1.15
UI Unifi Network Video Recorder Instant
All of the following
UI Enterprise Network Video Recorder Firmware<=5.1.15
UI Enterprise Network Video Recorder
All of the following
UI Enterprise Network Video Recorder Core Firmware<=5.1.15
UI Enterprise Network Video Recorder Core
All of the following
UI Unifi Network Video Recorder G2 Firmware<=5.1.15
UI Unifi Network Video Recorder G2
All of the following
UI Unifi Network Video Recorder G2 Pro Firmware<=5.1.15
UI Unifi Network Video Recorder G2 Pro
All of the following
UI Unifi Cloud Gateway Max Firmware<=5.1.15
UI Unifi Cloud Gateway Max
All of the following
UI Unifi Cloud Gateway Industrial Firmware<=5.1.15
UI Unifi Cloud Gateway Industrial
All of the following
UI Unifi Cloud Gateway Fiber Firmware<=5.1.15
UI Unifi Cloud Gateway Fiber
All of the following
UI Unifi Dream Router 5g Max Firmware<=5.1.15
UI Unifi Dream Router 5g Max
Event History
Jul 2, 2026
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-55112?
The severity of CVE-2026-55112 is high, rated at 7.5.
2
What does CVE-2026-55112 exploit?
CVE-2026-55112 exploits an improper access control vulnerability in UniFi OS with the UniFi Protect Application.
3
Who can exploit CVE-2026-55112?
A malicious actor with low privileges and access to the network can exploit CVE-2026-55112.
4
How can I fix CVE-2026-55112?
To fix CVE-2026-55112, ensure you update your UniFi OS and UniFi Protect Application to the latest versions as provided by the vendor.
5
What are the consequences of CVE-2026-55112 exploitation?
Exploitation of CVE-2026-55112 can lead to privilege escalation on the host device.