Executive brief
UniFi Connect is a network management application used by organizations to administer wireless and switching infrastructure. A network-accessible privilege escalation vulnerability allows an attacker with network access to gain elevated permissions within the application, potentially enabling unauthorized configuration changes and administrative control.
Technical details
An improper access control vulnerability in UniFi Connect Application permits privilege escalation through network-based exploitation. The vulnerability requires network access to the affected application but does not mandate prior authentication. An attacker can exploit this flaw to escalate their privileges within UniFi Connect, obtaining administrative or elevated access levels. This could lead to unauthorized management of network infrastructure, configuration tampering, and credential exposure. Patches or updates are expected to be available from Ubiquiti through their security advisory channels.
Affected products
- Ubiquiti UniFi Connect
Timeline
- 2026-08-26: disclosed
- 2026-08-26: advisory