CVE-2026-55110 (GCVE-0-2026-55110)

Vulnerability from cvelistv5 – Published: 2026-07-02 14:49 – Updated: 2026-07-02 15:52
VLAI
Summary
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-942 - Permissive Cross-domain Policy with Untrusted Domains
Assigner
References
Impacted products
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55110",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-02T15:41:35.927153Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-02T15:52:20.711Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "UniFi OS Server",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Dream Machines",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Enterprise Fortress Gateway",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Dream Wall",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Dream Routers",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Express 7",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cloud Keys",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Network Video Recorders",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Enterprise Video Recorders",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cloud Gateways",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Network Attached Storage",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Enterprise Firewall Core",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "5.1.19",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user\u0027s session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-942",
              "description": "CWE-942 Permissive Cross-domain Policy with Untrusted Domains",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-02T14:49:16.794Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2026-55110",
    "datePublished": "2026-07-02T14:49:16.794Z",
    "dateReserved": "2026-06-16T15:00:01.614Z",
    "dateUpdated": "2026-07-02T15:52:20.711Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-55110",
      "date": "2026-07-09",
      "epss": "0.00181",
      "percentile": "0.0787"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-55110\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2026-07-02T15:17:04.870\",\"lastModified\":\"2026-07-09T18:33:16.890\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user\u0027s session.\"}],\"affected\":[{\"source\":\"support@hackerone.com\",\"affectedData\":[{\"vendor\":\"Ubiquiti Inc\",\"product\":\"UniFi OS Server\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Dream Machines\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Enterprise Fortress Gateway\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Dream Wall\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Dream Routers\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Express 7\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Cloud Keys\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Network Video Recorders\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Enterprise Video Recorders\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Cloud Gateways\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Network Attached Storage\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Ubiquiti Inc\",\"product\":\"Enterprise Firewall Core\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"5.1.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.6,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-02T15:41:35.927153Z\",\"id\":\"CVE-2026-55110\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-942\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"965B08F6-66A2-4C38-922D-CA772483941D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"C404F220-CC40-4CE2-A0CF-13D9F53FA5FD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_machine_beast:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82A0A6D7-4361-49AD-87E3-3FB32A958C4E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"629B14D2-94A8-4C0F-9844-DCCC75B76904\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B493983E-8632-4492-9B0A-E8E11E0E0BB2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"04FEA48A-5115-4857-9EBE-C76C26B92FFA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_machine_special_edition:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEF52155-86F1-458A-8B7E-355B67C5C819\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"FC6ED125-277D-45E8-81E9-2F33ED713258\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_machine_pro_max:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60808A48-C41A-448F-97C4-B1CD8DCCB4DA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"C404F220-CC40-4CE2-A0CF-13D9F53FA5FD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_machine_beast:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82A0A6D7-4361-49AD-87E3-3FB32A958C4E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"2F4C93E7-2746-4D54-9AFD-3CA8B8DB1517\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:enterprise_fortress_gateway:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C87C188-7982-4DFF-98F1-58511360F3E3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"12856016-3F9D-43EA-98E8-CA7C1134CD5D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_router:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1FF6A5E-A223-4F57-9FFD-F2AE473B3627\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"45BB62B2-C27D-4D58-8528-C4F28C8936DE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_wall:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9B6514E-2878-4AEE-BF1E-08B804C069FE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"1E604718-E38D-4AB8-B76E-3C9B2339F7A9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_dream_router_7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A41E5541-FC13-430C-BDCA-CC677B372D7F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"56A6ECCB-C731-4A7E-8E86-A1DF71A63D02\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_express_7:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CD0201D-D5C9-4CE7-A302-467F602D73D2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"ECE501C5-1BFC-4DF1-A56D-4A5B2BF2F58C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloudkey:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A484BC77-24D3-423F-AC16-3341C3396BA1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"E9FB02C8-CCB3-433B-89F1-025295A97333\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloud_key_plus:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C4ED829-08E6-4330-B105-DC01A3159C90\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"AA734284-6D1E-4502-AECF-063233795E82\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloudkey_enterprise:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDD7812E-3548-4B2C-9416-DEE0985AB07C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"3AFF8A43-D4FF-4193-9DAB-23463E6E731C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_network_video_recorder:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5D7AF0C-CF50-485D-8471-9AB1AA6471CA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"9C8006E8-54C0-4F4C-9346-92367ED3A57C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_network_video_recorder_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87FB08DA-35EA-4C27-AA5F-2B7AE25D58FA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"879FD15D-4886-4DF9-A959-C37059FFF4FF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_network_video_recorder_instant:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC8EB74F-F32A-4A5E-B613-58F2F7BC24CB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"86106709-F803-4ED1-A738-85E5A9D1114A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:enterprise_network_video_recorder:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"348BBC75-CA5B-4B38-A2CF-28313B7168F5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"75B77A46-2B11-42E7-A624-2CFD9BD66576\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:enterprise_network_video_recorder_core:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD22580F-1E63-48F0-BE9C-1EA9328DD539\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"AE4972F7-C1BD-48C2-ABC3-E1E806CDD4D2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_network_video_recorder_g2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1FF59AE-F5F6-4539-97EC-5157F67FD055\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"A0E87293-981C-402A-B3A4-2342A72F48A3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_network_video_recorder_g2_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29A3E3E6-68EF-43E6-9AB3-AD52FCADE57F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"8E2DD333-5BA0-444D-A6E5-400A4EBCDB49\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloud_gateway_ultra:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C468BFA-A87B-4A3F-B12C-B3BCE225167C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"8E7D32DF-0FE0-40F1-BC46-53A38A1275F0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloud_gateway_max:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"022225AB-7AF9-4F7A-97A2-CD8700DEA087\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"B75FEA76-3EEC-41AF-973B-5E7E06DBC3FB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloud_gateway_industrial:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABDECBF6-CB92-4AF6-A3AB-D4AA4635B688\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.15\",\"matchCriteriaId\":\"9BC859E7-4839-41E1-B891-01D6C768737E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unifi_cloud_gateway_fiber:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01C00466-E414-4DF7-8752-93D3D77C5104\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.16\",\"matchCriteriaId\":\"45BE2B93-8EBB-4DAC-942A-49F81D9E18E0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unas_2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FC98765-1006-49C1-9464-92428738170A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.16\",\"matchCriteriaId\":\"ECEE2017-FFDB-40A3-944E-A3631FEE97DB\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unas_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A68133D0-7571-4E6C-A5F5-AAD2DFE91B80\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.16\",\"matchCriteriaId\":\"CAD7A583-F050-4780-B15E-C5D892FBAC4F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unas_pro:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF0AD026-E7CD-4783-8B5B-BF50CFEF8F37\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.16\",\"matchCriteriaId\":\"62027A00-7DEA-4111-B99F-8BB135DB99F9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unas_pro_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A57444B-B60E-4AE0-A198-C85546D94126\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.16\",\"matchCriteriaId\":\"FB961E8B-008E-4875-84EA-C9B9DFFD3D4D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:unas_pro_8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63EC6593-E65D-4287-BB47-0EC53BCA7BAB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:ui:enterprise_firewall_core_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.1.18\",\"matchCriteriaId\":\"53FAB237-6408-416F-847F-DF28C09739B9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:ui:enterprise_firewall_core:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AC5F542-03AE-4C66-9B37-8AE4A74DEBE1\"}]}]}],\"references\":[{\"url\":\"https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc\",\"source\":\"support@hackerone.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-55110\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-02T15:41:35.927153Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-02T15:41:36.930Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\"}}], \"affected\": [{\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi OS Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Dream Machines\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Enterprise Fortress Gateway\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Dream Wall\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Dream Routers\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Express 7\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Cloud Keys\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Network Video Recorders\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Enterprise Video Recorders\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Cloud Gateways\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Network Attached Storage\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"Enterprise Firewall Core\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"5.1.19\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user\u0027s session.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-942\", \"description\": \"CWE-942 Permissive Cross-domain Policy with Untrusted Domains\"}]}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2026-07-02T14:49:16.794Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-55110\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-02T15:52:20.711Z\", \"dateReserved\": \"2026-06-16T15:00:01.614Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2026-07-02T14:49:16.794Z\", \"assignerShortName\": \"hackerone\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.