A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc
Source: Mitre, NVD
Published: 2026-07-02
Updated: 2026-07-02
Base Score: 6.1
Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:P/A:C
Severity: Medium
Base Score: 7.5
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
Severity: High