Executive brief
UniFi Access is a network access control application used to manage device permissions and security in enterprise environments. A privilege escalation vulnerability allows a low-privileged user with network access to escalate their permissions on the host device, potentially enabling unauthorized administrative control or lateral movement within the network.
Technical details
An improper access control vulnerability in the UniFi Access application allows privilege escalation on the host device. The vulnerability requires network access and low-level privileges on the system, but does not require authentication bypass. A successful exploitation grants an attacker elevated privileges on the affected host, potentially leading to full administrative control. Patch availability details are not confirmed in the provided advisory excerpt.
Affected products
- Ubiquiti UniFi Access
Timeline
- 2026-08-26: disclosed