CVE-2026-110455
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
Risk Assessment
An attacker with network access can execute arbitrary commands on the device, potentially leading to device compromise and possibly the entire infrastructure.
Recommendation
Update UniFi Protect AI Key firmware to the latest patched version. Restrict network access to the device and monitor for suspicious activity.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
- CVE-2026-110459High
A malicious actor with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
- CVE-2026-110458Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to create or truncate files on the device under certain conditions.
- CVE-2026-110457Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to obtain information about files on the device under certain conditions.
- CVE-2026-110456Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
Original NVD description (English source)
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS