Server-Side Request Forgery in UniFi Talk Application
CVE-2026-55113

7.5HIGH

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Talk Application
Vendor
CVE Published:
2 July 2026

What is CVE-2026-55113?

A Server-Side Request Forgery (SSRF) vulnerability exists in the UniFi Talk Application that allows a malicious actor with network access to exploit certain API endpoints. This can lead to a Denial of Service (DoS) attack and permit unauthorized bypass of authentication mechanisms, potentially compromising the integrity of the system.

Affected Version(s)

UniFi Talk Application 0 < 5.2.2

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.