CVE-2026-110454
Awaiting Analysis Awaiting Analysis - Queue

Improper Access Control in UniFi Protect AI Key

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Ubiquiti

Description
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-14
EPSS Evaluated
2026-10-18
NVD
CVE-2026-110454
EUVD
EUVD-2026-100815

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Ubiquiti Inc UniFi Protect AI Key 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Access Control issue in UniFi Protect AI Key. A malicious actor with network access could exploit it to access internal resources through the device without proper authorization.

Detection Guidance

Detecting this vulnerability requires checking for improper access control in UniFi Protect AI Key devices. Monitor network traffic for unauthorized access attempts to internal resources from the device. Use network scanning tools like nmap to identify exposed UniFi Protect AI Key devices on your network. Check device logs for unusual activity or access patterns.

Impact Analysis

An attacker could gain unauthorized access to internal network resources via the affected device, potentially leading to data breaches or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate GDPR (data protection) or HIPAA (health data privacy) requirements, depending on the data exposed.

Mitigation Strategies

Immediately update UniFi Protect AI Key to the latest firmware version to address the Improper Access Control vulnerability. Ensure network segmentation to restrict access to internal resources from the device. Monitor network traffic for unusual activity targeting the device.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110454. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart