{"id":"CVE-2026-55118","aliases":["EUVD-2026-41397","GHSA-f3pc-vh4r-hxxh"],"status":"published","title":"A malicious actor with access to the network,low privileges and under certain conditions could...","description":"A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00367,"percentile":0.30907,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2026-07-02T14:50:48Z","modified":"2026-10-25T21:10:00Z","products":[{"vendor":"ubiquiti inc","product":"unifi network application"},{"vendor":"ui","product":"unifi_network_application"}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55118"},{"url":"https://github.com/advisories/GHSA-f3pc-vh4r-hxxh"}],"sources":{"cve":[{"id":"CVE-2026-55118","description":"A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.","status":"published","published":"2026-07-02T14:50:48.734Z","modified":"2026-07-02T15:51:29.494Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:20:11.925815Z"}],"euvd":[{"id":"EUVD-2026-41397","description":"A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.","status":"published","published":"2026-07-02T14:50:48Z","modified":"2026-07-02T15:51:29Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:17.430912Z"}],"ghsa":[{"id":"GHSA-f3pc-vh4r-hxxh","title":"A malicious actor with access to the network,low privileges and under certain conditions could...","description":"A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.","status":"published","published":"2026-07-02T15:32:14Z","modified":"2026-07-02T15:32:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:09:12.451783Z"}],"nvd":[{"id":"CVE-2026-55118","description":"A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.","status":"published","published":"2026-07-02T15:17:05.84Z","modified":"2026-10-25T21:10:00.77Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:12:27.541515Z"}]}}