Description

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

Severity (CVSS)

Base score8.1
SeverityHigh
VersionCVSS 3.1
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Provided byCNA

Weaknesses

  • CWE-284 — CWE-284 Improper Access Control - Generic

Affected products

VendorProductVersions
Ubiquiti IncUniFi Talk Application0 to <5.2.2

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 03 Jul 2026 07:05 UTC.