Improper Access Control in UniFi OS by Ubiquiti Network Devices
CVE-2026-55116

9CRITICAL

Key Information:

Vendor: Ubiquiti Inc
Status: Dream Machines; Enterprise Fortress Gateway; Dream Wall; Dream Routers
Vendor: CVE Published:; 2 July 2026

🔔 Create Ubiquiti Inc Vulnerability Alert

What is CVE-2026-55116?

A vulnerability exists in certain devices running UniFi OS, allowing a malicious actor with network access to exploit improper access control. This may lead to unauthorized modifications of device configurations under specific network conditions. Administrators are advised to apply security patches and follow best practices to secure their network devices from potential exploitation.

Affected Version(s)

Cloud Gateways 0 < 5.1.19

Dream Machines 0 < 5.1.19

Dream Routers 0 < 5.1.19

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 2, 2026
Vulnerability Reserved
Jun 16, 2026

CVE-2026-55116 Data

JSON