Ubiquiti UniFi Protect AI Key: Improper access control allows information disclosure and DoS
Summary
UniFi Protect AI Key, an edge AI appliance for UniFi Protect, contains an improper access control flaw (CWE-284). An attacker with network access and no login or user interaction can obtain information, make unauthorized changes and cause a denial of service. According to the CNA record, versions below 2.2.8 are affected. The CVSS base score is 8.6 (High).
Affected
- UniFi Protect AI Key versions below 2.2.8 (according to the CNA record; NVD analysis pending)
Fixed in
- Version 2.2.8 (according to CNA data and press coverage; confirm against Ubiquiti Security Advisory Bulletin 070 before rollout)
Workaround
Unknown. No vendor workaround is described in the sources reviewed.
Exploitation
- No evidence of exploitation in the wild found.
- Not listed in CISA KEV at the time of research.
- No public proof of concept found.
- CISA SSVC: exploitation none, automatable yes, technical impact partial.
Our recommendation
- Update all UniFi Protect AI Key devices to version 2.2.8 or later, and patch the related CVEs in Ubiquiti Security Advisory Bulletin 070 (CVE-2026-110455, CVE-2026-110456, CVE-2026-110457, CVE-2026-110458) at the same time.
- Until patched, restrict which hosts can reach the management interface and place the device on a segment separate from user devices.
- Verify that the device and its management interface are not reachable from the internet.
- Monitor for unusual configuration changes or service outages on the device and check CISA KEV again periodically.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Ubiquiti Security Advisory Bulletin 070 community.ui.com
- Vulners CNA record CVE-2026-110459 vulners.com
- Strix CVE-2026-110459 www.strix.ai
- Cybernews: Ubiquiti AI Key vulnerabilities cybernews.com
- Ubiquiti AI Key setup and FAQs help.ui.com
- Ubiquiti AI Key product page store.ui.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 08:15.
Original description (NVD)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.