Loading vulnerability…
Authentication Bypass in UniFi Protect Application
CVE-2026-54409 is an Improper Initialization vulnerability in UniFi Protect Application affecting version 7.1.77 and earlier. Under certain conditions, a network-adjacent attacker can exploit the flaw to bypass authentication in UniFi Protect Cameras. The issue stems from incorrect or incomplete initialization of security-relevant state, allowing authentication controls to be circumvented in camera access workflows.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker on the adjacent network, under the required conditions, to bypass authentication protections for UniFi Protect Cameras. This can result in unauthorized access to camera functionality or protected resources exposed through the UniFi Protect environment, undermining access control and the confidentiality and integrity of camera-related operations.
If you can’t patch tonight, do this now.
No interim workaround information is available. Where immediate patching is not possible, reduce exposure by restricting network adjacency to trusted management segments, limiting access to UniFi Protect services, and monitoring for unauthorized camera access attempts until the update can be applied.
Patch, then assume compromise.
Upgrade UniFi Protect Application to version 7.1.83 or later. Vendor-provided patched releases are the primary remediation.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.