Security Advisory

CVE-2026-54407

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-02 14:49:16
Last updated 2026-07-02 16:08:49
Assigner hackerone
CVSS score 8.6
State PUBLISHED

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.