CVE-2026-56842

HIGH
MEDIUM Priority: 0.03 BB Relevance: 55/100
Published: 2026-07-02 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
ui unifi_network_application < 10.4.57

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.36%
Raw Score 0.003620
Percentile 30.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00362
2026-10-28
0.00362

Intelligence Sources

nvd ref →