EXPOSURES › CVE-2026-55115

CVE-2026-55115

CRITICAL

DETAIL

SourceNVD · cve Published2026-07-02 CVSS9.9 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-55115 ↗

SHAME 35/100

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

ui · vendor unifi protect · product

DESCRIPTION

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.