This vulnerability (CVE-2026-55118) involves improper access control (CWE-284) in the UniFi Network Application by Ubiquiti Inc. An attacker with network access and low privileges may exploit this issue to escalate privileges within the application. The CVSS v3.1 base score is 8.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and impacts including low confidentiality, high integrity, and high availability impacts. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation allows an attacker with low privileges and network access to escalate their privileges within the UniFi Network Application, potentially leading to unauthorized modification or disruption of the application. The impact affects confidentiality to a limited extent but has high impact on integrity and availability of the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently documented, monitor Ubiquiti Inc's advisories for updates. Restrict network access to the UniFi Network Application to trusted users only as a precaution.