CVE-2026-110457 Ubiquiti Inc CVE debrief

Who should care

Defenders responsible for UniFi Protect AI Key devices and network security should assess exposure and apply patches to prevent exploitation. This includes reviewing device configurations and access controls to ensure secure deployment. Additionally, defenders should monitor for suspicious network activity to detect potential attacks.

Why it matters

CVE-2026-110457 is a Path Traversal vulnerability in UniFi Protect AI Key that could allow a malicious actor with network access to obtain information about files on the device under certain conditions. Defenders responsible for UniFi Protect AI Key devices and network security should assess exposure and apply patches.

• Verify and apply vendor patches to prevent exploitation
• Monitor for suspicious network activity to detect potential attacks
• Review device configurations and access controls to ensure secure deployment

Technical summary

A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device. The vulnerability has a CVSS score of 3.7 and a severity rating of LOW. The CVE record and vendor advisory provide information about the vulnerability and affected versions.

Defensive priority

Verify and apply vendor patches; monitor for suspicious network activity

Recommended defensive actions

• Verify and apply vendor patches
• Monitor for suspicious network activity
• Review device configurations and access controls

Evidence notes

The CVE record and vendor advisory provide information about the vulnerability and affected versions. The vulnerability is a Path Traversal issue in UniFi Protect AI Key, which could allow a malicious actor with network access to obtain information about files on the device under certain conditions. The CVE record was published on 2026-10-14T05:12:18.433Z and has not been modified since then. There are no known instances of exploitation, but defenders should still assess exposure and

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.