CVE-2026-56841 — Ubiquiti Inc / UniFi Protect Application

CVE-2026-56841

Ubiquiti Inc / UniFi Protect Application PUBLISHED

Description (CNA)

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.

Affected (CNA)

Vendor / product	Versions
Ubiquiti Inc / UniFi Protect Application	affected 0 before 7.1.83

CWE

CWE-89

References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.