Executive brief
Ubiquiti UniFi Protect, a video surveillance management system, contains a security vulnerability that could allow an authorized user with low-level access to gain full control over the host device. By exploiting a flaw in how the application handles internal requests, an attacker can bypass security boundaries to escalate their privileges. This could lead to unauthorized access to sensitive video data, system configuration changes, or complete takeover of the surveillance infrastructure.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in the Ubiquiti UniFi Protect Application in versions prior to 7.1.83. The flaw (CWE-918) allows a network-adjacent or remote attacker with low-privileged credentials to induce the application to make unauthorized requests to internal or external resources. By leveraging this SSRF, an attacker can achieve privilege escalation on the underlying host device. The vulnerability is rated critical due to its high impact on confidentiality, integrity, and availability, combined with a scope change (CVSS 3.1 Score 9.9). Users are advised to update to UniFi Protect Application version 7.1.83 or later.
Affected products
- Ubiquiti Inc UniFi Protect Application versions before 7.1.83
Timeline
- 2026-07-02: advisory: Security Advisory Bulletin 066 published by Ubiquiti
- 2026-07-02: disclosed: CVE-2026-55115 published to NVD via HackerOne