CVE-2026-55116
No fix known EPSS <1%CVSS 9.0
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Products: Ubiquiti Inc Dream Machines, Ubiquiti Inc Enterprise Fortress Gateway, Ubiquiti Inc Dream Wall, Ubiquiti Inc Dream Routers, Ubiquiti Inc Express 7, Ubiquiti Inc Cloud Gateways, Ubiquiti Inc Enterprise Firewall Core