A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Ubiquiti |
|
No data.
No data.
References
History
Thu, 02 Jul 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Incorrect Authorization in UniFi Network Application Allows Persistent Privileges |
Thu, 02 Jul 2026 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ubiquiti
Ubiquiti unifi Network Application |
|
| Vendors & Products |
Ubiquiti
Ubiquiti unifi Network Application |
Thu, 02 Jul 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 02 Jul 2026 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed. | |
| Weaknesses | CWE-863 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2026-07-02T14:50:49.035Z
Updated: 2026-07-02T15:50:57.619Z
Reserved: 2026-06-23T15:00:03.632Z
Link: CVE-2026-56842
Vulnrichment
Updated: 2026-07-02T15:41:20.554Z
NVD
No data.
Redhat
No data.