Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-54408 | 9.8 critical | 1.0% | ui, unifi_protect | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming. | Sun 25 Oct |
| CVE-2026-110455 | 8.1 high | 1.0% | no CPE yet | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device. | 15 Oct |
| CVE-2026-55111 | 7.5 high | 1.0% | ui, protect_floodlight_firmware | A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight. | Sun 25 Oct |
| CVE-2026-55115 | 9.9 critical | 0.00% | ui, unifi_protect | A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device. | Sun 25 Oct |
| CVE-2026-56841 | 8.8 high | 0.00% | ui, unifi_protect | A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device. | Sun 25 Oct |
| CVE-2026-54407 | 8.6 high | 0.00% | ui, unifi_protect | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints. | Sun 25 Oct |
| CVE-2026-110459 | 8.6 high | 0.00% | no CPE yet | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device. | 15 Oct |
| CVE-2026-54409 | 8.1 high | 0.00% | ui, unifi_protect | A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras. | Sun 25 Oct |
| CVE-2026-110454 | 5.3 medium | 0.00% | no CPE yet | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device. | 15 Oct |
| CVE-2026-110456 | 5.3 medium | 0.00% | no CPE yet | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device. | 15 Oct |
| CVE-2026-110457 | 3.7 low | 0.00% | no CPE yet | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device. | 15 Oct |
| CVE-2026-110458 | 3.7 low | 0.00% | no CPE yet | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device. | 15 Oct |
12 of 12
Download these 12 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.