Dashboard / CVE-2026-54409

CVE-2026-54409

HIGH
MEDIUM Priority: 0.04 BB Relevance: 66/100
Published: 2026-07-02 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
ui unifi_protect < 7.1.83

References & Advisories (1)

Bug Bounty Relevance

66 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

8.1 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.44%
Raw Score 0.004400
Percentile 38.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00440
2026-10-28
0.00440

Intelligence Sources

nvd ref →

External Links