Loading vulnerability…
Denial of Service in UniFi Network Application Improper Input Validation
CVE-2026-54405 is an improper input validation vulnerability in UniFi Network Application. The flaw affects UniFi Network Application version 10.3.58 and earlier and can be exploited by a network-adjacent attacker to trigger a denial-of-service condition against the application. Available information indicates the issue stems from insufficient validation of attacker-controlled input, allowing malformed or unexpected input delivered over the network to disrupt normal application operation.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker with network access to cause a denial-of-service condition in UniFi Network Application. The primary impact is loss of availability of the application, which may interrupt management or operational functions dependent on the service. No evidence is provided that this issue directly enables code execution, privilege escalation, or unauthorized data access.
If you can’t patch tonight, do this now.
No interim workaround information is available. The practical mitigation is to apply the vendor-provided update on affected UniFi Network Application deployments as soon as possible and limit unnecessary network exposure to trusted management networks until patching is completed.
Patch, then assume compromise.
Upgrade UniFi Network Application to version 10.4.57 or later, which contains the vendor fix for CVE-2026-54405.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.