CVE-2026-55119

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ui:unifi_talk_application:*:*:*:*:*:*:*:*

History

25 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Un actor malicioso con acceso a la red y privilegios bajos podría explotar una vulnerabilidad de control de acceso inadecuado encontrada en la aplicación UniFi Talk para escalar privilegios dentro de la aplicación UniFi Talk.

Information

Published : 2026-07-02 15:17

Updated : 2026-10-25 21:10

NVD link : CVE-2026-55119

Mitre link : CVE-2026-55119

CVE.ORG link : CVE-2026-55119

JSON object : View

Products Affected

ui

unifi_talk_application

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-55119", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-55119", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-02T15:41:17.326960Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "support@hackerone.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "support@hackerone.com", "affectedData": [{"vendor": "Ubiquiti Inc", "product": "UniFi Talk Application", "versions": [{"status": "affected", "version": "0", "lessThan": "5.2.2", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-02T15:17:05.957", "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc", "tags": ["Vendor Advisory"], "source": "support@hackerone.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "support@hackerone.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application."}, {"lang": "es", "value": "Un actor malicioso con acceso a la red y privilegios bajos podr\u00eda explotar una vulnerabilidad de control de acceso inadecuado encontrada en la aplicaci\u00f3n UniFi Talk para escalar privilegios dentro de la aplicaci\u00f3n UniFi Talk."}], "lastModified": "2026-10-25T21:10:00.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ui:unifi_talk_application:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EFA9E4F-0AF4-43E6-AE50-417C21ABF4F1", "versionEndExcluding": "5.2.2"}], "operator": "OR"}]}], "sourceIdentifier": "support@hackerone.com"}