---
id: CVE-2026-110456
title: >-
  A malicious actor with access to the network and under certain conditions
  could exploit an Improper Access Control vulnerability found in UniFi Protect
  AI Key to access internal resources through the device.
summary: >-
  A malicious actor with access to the network and under certain conditions
  could exploit an Improper Access Control vulnerability found in UniFi Protect
  AI Key to access internal resources through the device.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-284
vendor: Ubiquiti Inc
product: UniFi Protect AI Key
affected:
  - unifi_protect_ai_key < 2.2.8
published: '2026-10-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T20:38:04.303'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110456'
references:
  - url: >-
      https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73
    label: fe490ce8-0395-4072-90d8-2707e1bdf984
tags:
  - nvd
  - cve.org
epss: 0.00262
epssPercentile: 0.17935
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-14T17:57:04.408362Z'
ingestedAt: '2026-10-14T06:17:13.784Z'
---

## Overview

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.