Security Advisory

CVE-2026-55110

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-02 14:49:16

Last updated 2026-07-02 15:52:20

Assigner hackerone

CVSS score 7.5

State PUBLISHED

Description

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.

← Browse all CVEs View on cve.org ↗