Loading vulnerability…
Privilege Escalation in UniFi Network Application
CVE-2026-55114 is a high-severity improper access control vulnerability in Ubiquiti UniFi Network Application. The flaw affects version 10.3.58 and earlier and allows a malicious actor with network access and low privileges to escalate privileges within the application. Available information identifies the issue as remotely exploitable, with low attack complexity, low privileges required, and no user interaction required. The vulnerability stems from insufficient enforcement of authorization boundaries inside the UniFi Network Application, enabling actions or access beyond the permissions intended for a low-privileged account.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows privilege escalation within the UniFi Network Application. An attacker who starts with a low-privileged account can obtain elevated application-level permissions, which can expose sensitive configuration or operational data, permit unauthorized administrative changes, and compromise confidentiality, integrity, and availability within the affected application environment.
If you can’t patch tonight, do this now.
No interim workaround is available according to the available vendor information. Risk reduction measures include limiting network exposure to the application, restricting access to trusted management networks, minimizing the number of low-privileged accounts, auditing role assignments, and closely monitoring for unauthorized privilege changes until the patched version is deployed.
Patch, then assume compromise.
Upgrade UniFi Network Application to version 10.4.57 or later. Remediation should include correcting the improper access control condition, enforcing authorization checks on privileged functionality, and reviewing role and permission assignments to ensure low-privileged users cannot access administrative capabilities.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.