Executive brief
UniFi Connect Display Cast Pro is a network-attached display device used in corporate meeting rooms and collaborative spaces. A network attacker can exploit an access control vulnerability to gain elevated privileges on the device, potentially allowing them to modify settings, access sensitive data, or use it as a foothold to attack other systems on the network.
Technical details
The vulnerability is an improper access control flaw in UniFi Connect Display Cast Pro that permits privilege escalation under specific network conditions. An attacker with network access can exploit this vulnerability to elevate their privileges on the affected device. No authentication bypass or additional user interaction is required. Successful exploitation allows the attacker to gain administrative control of the device. Patches or mitigations should be available from Ubiquiti via their security advisory.
Affected products
- Ubiquiti UniFi Connect Display Cast Pro
Timeline
- 2026-08-26: disclosed