Executive brief
UniFi Network Application is used by organizations to centrally manage network infrastructure and security. An improper access control vulnerability allows an authenticated attacker with network access and elevated privileges to escalate their access further within the application, potentially gaining administrative control over the entire managed network.
Technical details
The vulnerability is an improper access control flaw in UniFi Network Application that allows privilege escalation. The attack requires network access and high privileges within the application, indicating this is not an unauthenticated remote exploit but rather a post-compromise lateral movement or privilege escalation vector. An attacker with these preconditions can escalate privileges to gain higher-level access within the UniFi Network Application. A fix is available in security updates from Ubiquiti; organizations should apply patches immediately to prevent privilege escalation attacks.
Affected products
- Ubiquiti UniFi Network Application <UNKNOWN>
Timeline
- 2026-08-26: disclosed
- 2026-08-26: advisory