CVE-2026-54406 — Ubiquiti Inc / UniFi Network Application

CVE-2026-54406

Ubiquiti Inc / UniFi Network Application PUBLISHED

Description (CNA)

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.

Affected (CNA)

Vendor / product	Versions
Ubiquiti Inc / UniFi Network Application	affected 0 before 10.4.57

CWE

CWE-22

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.