HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2026-55113

CVSS 7.5v3.1pub. 2026-07-02upd. 2026-07-09

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

  • Ui Unifi Talk Application

    APP
    Ui
    < 5.2.2
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
SSRFAuth BypassDoS
CWE
References

Related vulnerabilities

CVE-2026-50747CRITICAL9.9PL ✓same product

SQL Injection w UniFi Talk Application umożliwia eskalację uprawnień

CVE-2026-55119HIGH8.1PL ✓same product

Privilege Escalation w UniFi Talk Application (Improper Access Control)

CVE-2026-34909CRITICAL10.0⚠ KEVPL ✓same vendor

Path Traversal w UniFi OS — dostęp do plików systemowych i przejęcie konta

CVE-2026-34908CRITICAL10.0⚠ KEVPL ✓same vendor

Nieprawidłowa kontrola dostępu w UniFi OS — nieautoryzowane zmiany systemowe

CVE-2026-34910CRITICAL10.0⚠ KEVPL ✓same vendor

Command Injection w UniFi OS via nieprawidłowa walidacja wejścia