CVE-2026-55118

HIGH
MEDIUM Priority: 0.03 BB Relevance: 67/100
Published: 2026-07-02 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: High
A: High

Description

A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
ui unifi_network_application < 10.4.57

Bug Bounty Relevance

67 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

EPSS — Exploitation Probability

0.37%
Raw Score 0.003670
Percentile 30.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00367
2026-10-28
0.00367

Intelligence Sources

nvd ref →