An Improper Access Control flaw (CWE‑284) exists in Ubiquiti Inc’s UniFi Network Application. The vulnerability allows an attacker who has network reachability and basic user credentials to increase their privileges within the application. Based on the description, it is inferred that the attacker could modify network configurations, access restricted data, or disrupt services once the privilege escalation succeeds. The consequences are not explicitly stated but represent logical outcomes of elevated privileges.

The vulnerability impacts Ubiquiti Inc’s UniFi Network Application. No specific product versions are identified, implying that all versions prior to a vendor‑issued fix may be affected. Any deployment of the UniFi management console that is accessible over a network is potentially vulnerable, especially if low‑privileged accounts exist.

CVSS scoring of 8.8 signals a high severity flaw. The EPSS score of < 1% suggests that active exploitation is currently rare. The vulnerability is not listed in CISA KEV. The likely attack path involves an attacker with network access and a low‑privileged user account exploiting missing permission checks in the application to elevate privileges. The necessity of network reachability indicates that protecting the management interface and enforcing strict access controls are critical.