← Back

CVE-2026-56842

nvd nist
Published: Jul 2, 2026Modified: Jul 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: support@hackerone.com (Secondary)

Description

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

Affected (1)

Ui
1 product
Unifi Network Application
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unifi Network Application
Before 10.4.57

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

Source: support@hackerone.com
Vendor Advisory

Timeline

No history available yet.