CVE-2026-77541: CWE-284 Improper Access Control - Generic in Ubiquiti Inc UniFi Network Application

This vulnerability (CVE-2026-77541) involves improper access control (CWE-284) in the UniFi Network Application by Ubiquiti Inc. An attacker who already has high privileges and network access could exploit this flaw to escalate privileges further within the application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope change, with high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker with existing high privileges to gain elevated privileges within the UniFi Network Application, potentially compromising the application's confidentiality, integrity, and availability. This could lead to unauthorized administrative actions or control over the network management functions provided by the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to trusted users with high privileges and monitor for suspicious activity related to privilege escalation attempts within the UniFi Network Application.