CVE-2026-55116: exploitation status and patch state

CVE-2026-55116 · CVSS 9.0 CRITICAL · EPSS <1%

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

Is CVE-2026-55116 exploited?

• Not in the CISA KEV catalog.
• EPSS puts exploitation in the next 30 days at <1%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2026-55116

• ShareFile Shutdown Signals More Than Maintenance (2026-07-13)
• Partial UniFi Patching Leaves the Stack Exposed (2026-07-09)

Primary sources

• NVD record

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-12.