{"schemaVersion":3,"id":"CVE-2026-110456","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","dates":{"published":"2026-10-14T05:06:56.170Z","modified":"2026-10-14T17:57:30.697Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00262,"percentile":0.16948,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-14T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00262,"percentile":0.16948}],"last30":[{"date":"2026-10-14T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00262,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00262,"percentile":0.16948}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"}],"affected":[{"vendor":"ubiquiti inc","product":"unifi protect ai key","name":"UniFi Protect AI Key","label":"unifi protect ai key","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.2.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.2.8","eol":null,"hubHref":"/vendor/ubiquiti_inc/unifi_protect_ai_key"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73","label":"community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73","hostname":"community.ui.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-14T05:06:56.170Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T17:57:30.697Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:32:11.664Z","stale":false,"partial":false}}