{"id":"CVE-2026-110456","revision":"3842839f4293400ababfa9b6db6d263e","records":[{"revision":"3842839f4293400ababfa9b6db6d263e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-110456","aliases":[],"title":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","description":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","state":0,"publishedAt":"2026-10-14T05:06:56.17+00:00","modifiedAt":"2026-10-14T17:57:30.697+00:00","affected":[{"ecosystem":"Vendor product","name":"UniFi Protect AI Key","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Ubiquiti Inc\",\n                    \"product\": \"UniFi Protect AI Key\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.2.8\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3,"severity":"MEDIUM"}],"references":["https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110456","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-110456","identifiers":["CVE-2026-110456"]},"retained":false,"historicalAffected":[]}],"coverage":[]}