EUVD-2026-66400Severity by source
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Network-reachable access-control bypass with no auth (PR:N) but conditional preconditions (AC:H); privilege gain stays on the device itself, so S:U rather than S:C, with full CIA impact.
Primary rating from Vendor (Ubiquiti).
CVSS VectorVendor: Ubiquiti
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.
AnalysisAI
Privilege escalation in Ubiquiti's UniFi Connect Display Cast Pro lets a network-adjacent attacker abuse an improper access-control flaw to gain elevated rights on the device under certain conditions. The issue was reported by Ubiquiti and disclosed in Security Advisory Bulletin 067; it is tagged as an authentication bypass. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network access to the UniFi Connect Display Cast Pro (AV:N) and is gated by unspecified 'certain conditions' that the vendor describes, reflected in the high attack complexity (AC:H) - meaning a specific device state, configuration, or timing must hold for the access-control bypass to succeed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are partly strong, partly incomplete. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who has gained a foothold on the same LAN or VLAN as the UniFi Connect Display Cast Pro sends crafted requests to a network-exposed function that fails to properly enforce access control, and - once the required conditions are met - bypasses authentication to obtain elevated privileges on the device. From there they could tamper with displayed content, alter device configuration, or use the appliance as a pivot. … |
| Remediation | Patch available per vendor advisory: apply the firmware update referenced in Ubiquiti Security Advisory Bulletin 067 (https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9) as soon as it is available for your device; the exact fixed version is not stated in the supplied data and should be confirmed there. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all UniFi Connect Display Cast Pro devices and implement network segmentation to isolate them from untrusted network segments using VLAN isolation or firewalls. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today