{"schema":"threatline.record/2","record":{"id":"CVE-2026-110456","aliases":[],"summary":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the ","details":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device.","categories":["Network & edge"],"product":"UniFi Protect AI Key","vendor":"Ubiquiti Inc","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110456","source_modified_at":"2026-10-14T17:57:30.697Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"UniFi Protect AI Key","vendor":"Ubiquiti Inc","versions":[{"status":"affected","version":"0","lessThan":"2.2.8","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110456","source_modified_at":"2026-10-14T17:57:30.697Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"UniFi Protect AI Key","ecosystem":null},"version":"2.2.8","basis":"first unaffected version stated in the CVE record"}],"cvss":5.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00262,"percentile":0.17081,"score_date":"2026-10-23"},"published_at":"2026-10-14T05:06:56.170Z","modified_at":"2026-10-14T17:57:30.697Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-110456","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T17:57:30.697Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-110456","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://community.ui.com/releases/Security-Advisory-Bulletin-070-070/e7ffc9fa-9129-4a90-b5e3-d597c5ee7a73"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-14T17:57:04.408362Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-14T17:57:30.697Z","content_hash":"4dad94f3c68b37a71046fa367f72d74ec5f11b57520a0743cb0f84a5ad91efd3"}}