← Back to CVE search

CVE-2026-56841

UniFi Protect Application

Description

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

CVSS 8.8EPSS 0.27999999999999997%Risk 0.9
View source
Published
2026-07-02 15:17:07
Affected versions
unknown
Type
Critical software
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H