CVE-2026-110454 Ubiquiti Inc CVE debrief

Who should care

Network administrators and security teams responsible for managing UniFi Protect AI Key devices should assess exposure and prioritize patching to prevent unauthorized access.

Why it matters

CVE-2026-110454 is a medium-severity Improper Access Control vulnerability in UniFi Protect AI Key, allowing network-accessible exploitation. Network administrators and security teams should prioritize verifying and patching affected devices to prevent unauthorized access.

• Verify and patch UniFi Protect AI Key devices to prevent exploitation
• Restrict network access to UniFi Protect AI Key devices to limit attack surface
• Monitor UniFi Protect AI Key devices for suspicious activity to detect potential exploitation

Technical summary

CVE-2026-110454 is an Improper Access Control vulnerability in UniFi Protect AI Key, allowing a malicious actor with network access to exploit the device and access internal resources. The vulnerability is considered medium-severity, with a CVSS score of 5.3. The vulnerability is exploitable through the network, and successful exploitation could allow an attacker to access internal resources through the device. Network administrators and security teams should prioritize verifying and patching affected devices to prevent unauthorized access.

Defensive priority

Network administrators and security teams should prioritize verifying and patching UniFi Protect AI Key devices to prevent unauthorized access.

Recommended defensive actions

• Verify and apply the latest security patches for UniFi Protect AI Key
• Restrict network access to UniFi Protect AI Key devices
• Monitor UniFi Protect AI Key devices for suspicious activity

Evidence notes

The CVE record and UniFi Protect AI Key security advisory provide details on the Improper Access Control vulnerability. The CVE record was published on 2026-10-14T04:54:22.426Z and has not been modified since then. The UniFi Protect AI Key security advisory confirms the vulnerability and provides guidance on affected versions and patches. Network administrators and security teams should review these sources to understand the vulnerability and implement necessary mitigations. Evidence 1

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.