CVE-2026-110459: UniFi Protect AI Key DoS Vulnerability

CVE-2026-110459 Overview

CVE-2026-110459 is an Improper Access Control vulnerability [CWE-284] in Ubiquiti UniFi Protect AI Key. A network-adjacent attacker can exploit the flaw without authentication or user interaction. Successful exploitation allows the attacker to obtain information, make unauthorized configuration changes, and trigger a Denial of Service (DoS) condition on the device.

The vulnerability is network-reachable with low attack complexity. Ubiquiti published a security advisory addressing the issue on October 14, 2026.

Critical Impact
Unauthenticated network attackers can read device data, modify device state, and knock the UniFi Protect AI Key offline, disrupting video analytics and surveillance workflows.

Affected Products

Ubiquiti UniFi Protect AI Key (see Ubiquiti advisory for specific firmware versions)

Discovery Timeline

2026-10-14 - CVE CVE-2026-110459 published to the National Vulnerability Database
2026-10-14 - Last updated in NVD database
2026-10-14 - Ubiquiti publishes Security Advisory Bulletin 070

Technical Details for CVE-2026-110459

Vulnerability Analysis

The UniFi Protect AI Key is a dedicated appliance that runs AI-driven video analytics for UniFi Protect camera deployments. The device exposes network services that fail to properly enforce access control checks on incoming requests.

Because the flaw requires no credentials and no user interaction, any attacker who can reach the device over the network can interact with protected functionality. The impact spans confidentiality, integrity, and availability, with the availability impact being the most severe outcome.

Successful exploitation can disable the appliance, interrupting AI inference services that downstream UniFi Protect deployments rely on for motion events, object identification, and smart detections.

Root Cause

The root cause is an Improper Access Control weakness [CWE-284] in the UniFi Protect AI Key firmware. One or more endpoints or service interfaces do not validate the requester's authorization before executing privileged operations or returning sensitive data.

This class of flaw typically stems from missing authentication middleware, incorrectly scoped permission checks, or management interfaces exposed on network interfaces that should be restricted.

Attack Vector

Exploitation occurs over the network. An attacker who has reached the management network segment hosting the UniFi Protect AI Key sends crafted requests to the exposed service. No credentials and no user action are required.

Ubiquiti has not published technical exploitation details. Refer to the Ubiquiti Security Advisory Bulletin for vendor guidance.

Detection Methods for CVE-2026-110459

Indicators of Compromise

Unexpected reboots, service crashes, or loss of connectivity on UniFi Protect AI Key appliances.
Unauthorized configuration changes on the AI Key, including modified device settings or paired controller associations.
Anomalous inbound connections to the AI Key management interface from hosts outside the normal administrative range.

Detection Strategies

Monitor UniFi Protect controller logs for AI Key disconnects, unexpected re-provisioning events, or firmware state changes.
Deploy network intrusion detection signatures that flag unauthenticated requests to the AI Key's management API endpoints.
Correlate device uptime and health telemetry against baseline behavior to identify DoS attempts.

Monitoring Recommendations

Forward UniFi Protect and network device logs to a centralized SIEM for correlation and long-term retention.
Alert on repeated TCP connection failures or abnormal request rates targeting UniFi management services.
Review firewall and VLAN access logs for unexpected sources attempting to reach the UniFi Protect AI Key.

How to Mitigate CVE-2026-110459

Immediate Actions Required

Apply the firmware update referenced in the Ubiquiti Security Advisory Bulletin as soon as it is available for your deployment.
Restrict network access to the UniFi Protect AI Key management interface to trusted administrative hosts only.
Inventory all UniFi Protect AI Key devices and verify firmware versions against the vendor advisory.

Patch Information

Ubiquiti has published remediation guidance in Security Advisory Bulletin 070. Apply the fixed firmware version identified in the advisory to all affected UniFi Protect AI Key devices. Validate the update by confirming the running firmware version after reboot.

Workarounds

Place UniFi Protect AI Key appliances on a dedicated, isolated management VLAN with strict ingress filtering.
Block inbound traffic to AI Key management ports from untrusted networks and user subnets.
Disable or restrict any remote access features that are not required for operation until the patch is applied.

bash

# Example firewall rule to restrict access to UniFi Protect AI Key (replace with your subnets)
iptables -A FORWARD -s 10.10.10.0/24 -d 192.168.50.25 -j ACCEPT
iptables -A FORWARD -d 192.168.50.25 -j DROP