Skip to content
OpenAdvisories
High · 8.8 CVE-2026-56841 EUVD-2026-41399GHSA-472v-99p9-6699

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi P…

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: UniFi Protect Application Category: Network devices

Description

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Protect Application < 7.1.83 7.1.83

Advisories 2

References