Description

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

Related CPE's

a

ui

unifi_network_application

Vulnerable

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-863

CVSS impact metrics

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-07-02T15:17:07.870Z

3 months ago

Last modified

2026-07-06T19:27:30.060Z

3 months ago