UI UniFi Access vulnerabilities

4 CVEs affecting UI UniFi Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-55117, published 2026-07-02.

More from UI.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-52665, published 2025-10-31. Critical severity, CVSS 10.0. EPSS: 41.1% chance of exploitation in the next 30 days. A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication.…
• CVE-2026-50748, published 2026-07-02. Critical severity, CVSS 9.9. EPSS: 1.6% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host…
• CVE-2026-55117, published 2026-07-02. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.
• CVE-2026-54400, published 2026-07-02. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.