CVE-2026-54406: UI UniFi Network Application

High severity, CVSS 8.7. EPSS: 0.6% chance of exploitation in the next 30 days.

A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in self-hosted instances of UniFi Network Application to escalate write permission on the host device.

Affected products

• UI UniFi Network Application: before 10.4.57 (fixed in 10.4.57)

Published 2026-07-02. Last modified 2026-07-06.