This vulnerability (CVE-2026-55119) in the UniFi Talk Application allows a malicious actor with network access and low privileges to bypass access controls and escalate privileges within the application. The issue is categorized under CWE-284 (Improper Access Control). The CVSS v3.1 base score is 8.1, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation could allow an attacker to gain elevated privileges within the UniFi Talk Application, potentially leading to unauthorized access to sensitive information or modification of application data. The confidentiality and integrity of the application are at high risk, while availability is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the UniFi Talk Application to trusted users only and monitor for unusual privilege escalation attempts.