CVE-2026-55116: Ubiquiti UniFi OS improper access control in multiple gateways

CVE-2026-55116 · Severity: critical · CVSS 9 · Published 2026-07-02

A security vulnerability has been identified in several Ubiquiti UniFi networking devices, including Dream Machines and Cloud Gateways. An attacker with network access could bypass security controls to make unauthorized changes to the device's configuration. This could lead to a complete takeover of the network infrastructure, potentially allowing the attacker to intercept traffic or disable security features.

Technologies: Ubiquiti Cloud Gateway, Ubiquiti Dream Machine, Ubiquiti Dream Router, Ubiquiti Dream Wall, Ubiquiti Enterprise Firewall Core. Vendors: Ubiquiti.

Quick answers

Is CVE-2026-55116 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-55116 being exploited in the wild.
How severe is CVE-2026-55116?
Critical severity, with a CVSS score of 9, published 2 July 2026.
Which products and versions are affected?
Ubiquiti Cloud Gateway < 5.1.19; Ubiquiti Dream Machine < 5.1.19; Ubiquiti Dream Router < 5.1.19; Ubiquiti Dream Wall < 5.1.19; and 1 more.
Is there a fix for CVE-2026-55116?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-55116 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-55116?
Check whether you run Ubiquiti Cloud Gateway, Ubiquiti Dream Machine, Ubiquiti Dream Router or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper access control vulnerability (CWE-284) exists in UniFi OS affecting multiple Ubiquiti hardware platforms. The flaw allows a network-adjacent or remote attacker (depending on network configuration) to bypass authorization mechanisms and perform unauthorized administrative changes. While the attack complexity is rated as high, successful exploitation grants the attacker significant control over the device, potentially impacting the confidentiality, integrity, and availability of the entire managed network. The vulnerability is addressed in UniFi OS version 5.1.19 and later.

Affected products

  • Ubiquiti Inc Dream Machines < 5.1.19
  • Ubiquiti Inc Enterprise Fortress Gateway < 5.1.19
  • Ubiquiti Inc Dream Wall < 5.1.19
  • Ubiquiti Inc Dream Routers < 5.1.19
  • Ubiquiti Inc Express 7 < 5.1.19
  • Ubiquiti Inc Cloud Gateways < 5.1.19
  • Ubiquiti Inc Enterprise Firewall Core < 5.1.19

Timeline

  • 2026-07-02: disclosed
  • 2026-07-02: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.