CVE-2026-110456
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
Risk Assessment
An attacker with network access could use the device as an entry point to internal organizational resources, potentially leading to unauthorized data access or further lateral movement.
Recommendation
Update UniFi Protect AI Key to the latest firmware and restrict network access to the device to trusted network segments only.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-77557Critical
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
- CVE-2026-110459High
A malicious actor with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
- CVE-2026-110458Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to create or truncate files on the device under certain conditions.
- CVE-2026-110457Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to obtain information about files on the device under certain conditions.
- CVE-2026-110455High
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
Original NVD description (English source)
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS