PatchTheCVEunifi protect vulnerabilities and fixes
Recent CVEs affecting unifi protect, with upgrade or downgrade steps. 5 tracked.
Also searched as: unifiprotect.
unifi protect has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-07-02. Highest priority: CVE-2026-54408 (score 47/100).
- CVE-2026-54408 HIGH 8.6 UPGRADE A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U
- CVE-2026-54407 HIGH 8.6 UPGRADE A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U
- CVE-2026-55115 CRITICAL 9.9 UPGRADE A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (S
- CVE-2026-56841 HIGH 8.8 UPGRADE A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection v
- CVE-2026-54409 HIGH 7.5 UPGRADE A malicious actor with access to the network and under certain conditions could exploit an Improper Initializa
FAQ
How do I fix unifi protect vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unifi protect being exploited right now?
None of the tracked unifi protect CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unifi protect CVE should I patch first?
CVE-2026-54408 currently ranks highest (47/100): A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U.