CVE-2026-55110 [HIGH] – A malicious actor who lures an authenticated user to a malicious page could exploit a Cros

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user’s session.