CVE-2026-55115 is a critical server-side request forgery (CVSS 9.9) in the UniFi Protect Application. A low privileged actor with network access could use it to escalate privileges on the host device. The record names no versions, so use Ubiquiti Security Advisory Bulletin 066 to find the fixed release.
What's affected
- UniFi Protect Application, per the record.
- Affected and fixed versions: not stated in the record. Ubiquiti Bulletin 066 is the vendor source, and its page loads dynamically, so read it in a browser.
- The record describes an attacker with low privileges and network access.
How to check if you're exposed
Read the UniFi Protect version from the application settings. Compare it with the fixed release in Bulletin 066. Then list who has accounts on the console, including viewers and shared users, because the attack starts from a low privilege login. Check which networks can reach the console.
What to do now
- Open Bulletin 066 and find the fixed UniFi Protect version.
- Update the application on each console.
- Review user accounts and remove any that are unused or unrecognized.
- Limit access to the console to management networks.
Why it matters
The class is CWE-918, server-side request forgery. The application can be made to send requests on behalf of the attacker, to places the attacker cannot reach directly, such as services on the host itself.
That is why the record lists a changed scope and a score near the top of the range. A low privileged user ends up affecting the host. The record does not mark the CVE as exploited in the wild. The bulletin covers more than one UniFi CVE, so read all of it.
For your own projects, the free in-browser dependency scan needs no install, and the Gold directory tracks this CVE.
Quick check
Does the attacker need an account?
The record says low privileges are needed, so yes, some kind of login.
Sources
Last reviewed: 19 October 2026.
