CVE Vulnerabilities

CVE-2026-21633

Improper Authentication

Published: Jan 05, 2026 | Modified: Jan 05, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier).

Affected Products:

UniFi Protect Application (Version 6.1.79 and earlier).

Mitigation:

Update your UniFi Protect Application to Version 6.2.72 or later.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Potential Mitigations

References