Critical SSRF Vulnerability in UniFi Protect (CVE-2026-55115) with CVSS 9.9: Privilege Escalation Risk for DIB and Enterprises
Overview
A critical Server-Side Request Forgery (SSRF) vulnerability in UniFi Protect (CVE-2026-55115) allows attackers to escalate privileges on host devices with minimal access, posing significant risks to defense and enterprise environments.
Technical Analysis
CVE-2026-55115 is an SSRF flaw in the UniFi Protect application that enables attackers to forge internal requests to the host system. Exploitation requires initial network access and low-level privileges, after which crafted API requests can bypass security restrictions to execute arbitrary commands. This vulnerability leverages misconfigured internal endpoints to escalate privileges, granting unauthorized control over the host device.
Enterprise & DIB Impact
For Defense Industrial Base and enterprise networks, this vulnerability represents a high-risk exposure vector. Unauthorized privilege escalation could compromise critical infrastructure, sensitive data, or operational systems, particularly in environments where UniFi Protect is used for surveillance or access control.
Recommended Actions
- Apply the latest vendor patches immediately
- restrict access to UniFi Protect API endpoints via firewall rules
- monitor for anomalous internal request patterns
- perform internal red-team testing for SSRF vulnerabilities
- and implement network segmentation to limit lateral movement.
Need Help Assessing Your Exposure?
Axiom Cyber Research provides vulnerability assessment, red team operations, and security advisory services to the Defense Industrial Base and regulated sectors.
Schedule a ConsultationFull security advisory on 247alerts.net →