---
id: CVE-2026-110456
title: >-
  A malicious actor with access to the network and under certain conditions
  could exploit an Improper Access Control vulnerability found in UniFi Protect
  AI Key to access internal resources through the device.
summary: >-
  A malicious actor with access to the network and under certain conditions
  could exploit an Improper Access Control vulnerability found in UniFi Protect
  AI Key to access internal resources through the device.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-284
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T05:16:43.763'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110456'
references:
  - url: >-
      https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73
    label: fe490ce8-0395-4072-90d8-2707e1bdf984
tags:
  - nvd
ingestedAt: '2026-10-14T06:17:13.784Z'
---

## Overview

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.