CVE-2026-55113

HIGH

Ubiquiti INC UniFi Talk Application < 5.2.2 - Server-Side Request Forgery (SSRF)

Title source: rule

Description

A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.

References (1)

Core 1

Core References

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Scores

CVSS v3 7.5

EPSS 0.0022

EPSS Percentile 13.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (2)

Ubiquiti Inc/UniFi Talk Application < 5.2.2

ui/unifi_talk_application < 5.2.2

Published Jul 02, 2026

Tracked Since Jul 02, 2026