Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:unifi_protect_application:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUbiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad)
ProductUnifi Protect Application (c09ca345-5da7-5ae1-a7fd-62ffae629a9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56841 vulnerable 2026-07-29 01:00:29.336899 Details available
HIGH (8.8)
A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.
Published: 2026-07-02T14:50:48.763Z
Updated: 2026-07-02T15:51:17.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-55115 vulnerable 2026-07-29 01:00:28.337994 Details available
CRITICAL (9.9)
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.
Published: 2026-07-02T14:50:48.762Z
Updated: 2026-07-02T15:51:23.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54409 vulnerable 2026-07-29 01:00:27.777268 Details available
HIGH (7.5)
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vulnerability found in UniFi Protect Application to bypass authentication in UniFi Protect Cameras.
Published: 2026-07-02T14:49:16.639Z
Updated: 2026-07-02T16:10:07.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54408 vulnerable 2026-07-29 01:00:27.777029 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication for data streaming.
Published: 2026-07-02T14:49:16.684Z
Updated: 2026-07-02T16:08:26.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-54407 vulnerable 2026-07-29 01:00:27.776852 Details available
HIGH (8.6)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.
Published: 2026-07-02T14:49:16.605Z
Updated: 2026-07-02T16:08:49.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21634 vulnerable 2026-06-08 07:49:16.636377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21633 vulnerable 2026-06-08 07:49:16.635051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23164 vulnerable 2026-06-08 07:10:55.267754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23116 vulnerable 2026-06-08 07:10:55.220446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.