vulnerability context

CVE-2026-55115

CVSS 9.9 CRITICALEPSS 14%CWE-918OTX 2 pulses

A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.

Published 2026-07-02 · last modified 2026-07-07

details

CISA KEV status: Not in catalog
CVSS v3: 9.9 / CRITICAL
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS: 14% percentile (score 0.0023)
CWE: CWE-918
OTX pulses: 2 total, 0 recent

View on NVD → · cve.org

source mentions 2

[CyberHub] 📌 CVE-2026-55115 - A malicious actor with access to the network and low privileges could exploit a Server-Side Reque...Bluesky:@cyberhub.blog · 1h ago
[CVE Alerts ] CVE-2026-55115 - UniFi Protect Application SSRF Privilege Escalation CVE ID : CVE-2026-55115 Published : July 2, ...Bluesky · 5d ago

source consensus

Bluesky:@cyberhub.blog1×
Bluesky1×

Want the 3-bullet summary of CVE-2026-55115, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →