Vulnerability Details CVE-2026-21635
An Improper Access Control could allow a malicious actor in Wi-Fi range to the EV Station Lite (v1.5.2 and earlier) to use WiFi AutoLink feature on a device that was only adopted via Ethernet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.3%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-21635
-
cpe:2.3:h:ui:unifi_connect_ev_station_lite:-
-
cpe:2.3:o:ui:unifi_connect_ev_station_lite_firmware:*