# CVE-2026-55113: Ubiquiti UniFi Talk SSRF and authentication bypass

Source: https://junglewise.ai/threats/cve-2026-55113-ubiquiti-unifi-talk-ssrf-and-authentication-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-02. Updated: 2026-07-02  
License: CC BY 4.0 with a link back

CVE-2026-55113 · Severity: high · CVSS 7.5 · Published 2026-07-02

Ubiquiti UniFi Talk is a business communication system used for managing VoIP phone services. A security flaw has been identified that allows an attacker on the network to trick the system into making unauthorized requests. This could lead to a disruption of phone services or allow the attacker to bypass security checks to access certain administrative functions.

Technologies: [Ubiquiti UniFi Talk Application](https://junglewise.ai/threats/technologies/unifi-talk-application). Vendors: [Ubiquiti](https://junglewise.ai/threats/vendors/ubiquiti).

## Quick answers

**Is CVE-2026-55113 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-55113 being exploited in the wild.

**How severe is CVE-2026-55113?** High severity, with a CVSS score of 7.5, published 2 July 2026.

**Which products and versions are affected?** Ubiquiti UniFi Talk Application versions prior to 5.2.2.

**Is there a fix for CVE-2026-55113?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-55113 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-55113?** Check whether you run Ubiquiti UniFi Talk Application at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability (CWE-918) exists in the Ubiquiti UniFi Talk Application in versions prior to 5.2.2. An unauthenticated attacker with network access can exploit this flaw to induce the application to make unintended requests. This can be leveraged to bypass authentication mechanisms on specific internal API endpoints or to trigger a Denial of Service (DoS) condition. The vulnerability has a high complexity (AC:H) and results in a changed scope (S:C) according to the CVSS metrics. Users are advised to update to UniFi Talk Application version 5.2.2 or later to mitigate this risk.

## Affected products

- Ubiquiti Inc UniFi Talk Application versions prior to 5.2.2

## Timeline

- 2026-07-02: disclosed
- 2026-07-02: advisory

## References

- [https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc](https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc)

## Related threats

- [Ubiquiti UniFi Talk privilege escalation via improper access control](https://junglewise.ai/threats/cve-2026-55119-ubiquiti-unifi-talk-privilege-escalation-via-improper-access)
- [Ubiquiti UniFi Talk SQL injection privilege escalation](https://junglewise.ai/threats/cve-2026-50747-ubiquiti-unifi-talk-sql-injection-privilege-escalation)