A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · uiNVD modified 2026-10-25 21:10
Affected (CPE criteria) 1
cpe:2.3:a:ui:unifi_network_application:*:*:*:*:*:*:*:*