CVE-2026-110456

State
Published
Severity
5.3 Medium
Published
Oct 14, 2026
Updated
Oct 14, 2026
Reserved
Oct 14, 2026

Read the record on cve.org

Description

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NUbiquiti

Weaknesses

Affected Products

ProductVersions
UniFi Protect AI KeyUbiquiti Inc
  • before 2.2.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.