A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate priv…

CVE-2026-55115 is a Server-Side Request Forgery (SSRF) vulnerability identified in the UniFi Protect Application. A malicious actor with low privileges and network access can exploit this flaw to escalate privileges on the host device. The vulnerability poses a significant risk as it allows privilege escalation from a relatively low access level. Ubiquiti has published a security advisory bulletin addressing this issue. The NVD entry is currently awaiting full analysis. Organizations running UniFi Protect should apply patches or mitigations as soon as they become available. The vulnerability is rated as high criticality given the potential for privilege escalation.