Skip to content
OpenAdvisories
High · 8.6 CVE-2026-54407 EUVD-2026-41379GHSA-x7fp-rqc2-wmg4

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to b…

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by hackerone

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect Application to bypass authentication in certain UniFi Protect Application API endpoints.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Protect Application < 7.1.83 7.1.83

Advisories 2

References