This vulnerability (CVE-2026-56842) involves an incorrect authorization issue in the UniFi Network Application by Ubiquiti Inc. Under certain conditions, an attacker with network access can exploit this flaw to persist privileges within the application after their access should have been removed. The CVSS 3.1 vector indicates the attack requires network access with high attack complexity and low privileges, no user interaction, and impacts confidentiality, integrity, and availability at a high level. There is currently no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker to retain elevated privileges within the UniFi Network Application even after their legitimate access has been revoked. This can lead to unauthorized control, data compromise, and potential disruption of network management functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to trusted users only and monitor for unusual privilege persistence behaviors. Avoid relying solely on access revocation as a mitigation.