UniFi Protect AI Key Access Control Bypass

CVE-2026-110459 represents an Improper Access Control vulnerability (CWE-284) in Ubiquiti's UniFi Protect AI Key device that allows network-adjacent attackers to bypass authentication mechanisms and gain unauthorized access. With a CVSS score of 8.6, this vulnerability is classified as high-severity because it enables three distinct attack paths: information disclosure (reading sensitive configuration or video data), unauthorized modification (altering device settings or surveillance parameters), and Denial of Service (rendering the device inoperable). Organizations deploying UniFi Protect systems—particularly those in enterprise security, retail surveillance, and facility management—face direct risk if their network perimeter is compromised or if lateral movement occurs within their infrastructure.

While this CVE currently maps to zero Casky skills due to the absence of MITRE ATT&CK technique assignments, practitioners using Casky.ai's Claude-powered analysis would typically identify related attack patterns through behavioral detection frameworks. The vulnerability's exploitation would likely manifest across techniques such as T1078 (Valid Accounts—unauthorized access post-bypass), T1526 (Cloud Service Discovery—reconnaissance of device capabilities), and T1531 (Account Access Removal—DoS via access control manipulation). Security teams monitoring UniFi Protect deployments should establish network segmentation rules, implement strict access control lists, apply firmware updates immediately upon release, and configure alerting for failed authentication attempts and abnormal device configuration changes. Casky's extended reasoning capabilities would help correlate these low-level indicators into cohesive attack narratives, enabling faster detection of exploitation attempts even when formal MITRE mappings are pending.