CVE-2026-77552: CWE-20 Improper input validation in Ubiquiti Inc UniFi Enterprise Audio/Video Bridge

This vulnerability (CVE-2026-77552) in the UniFi Enterprise Audio/Video Bridge is caused by improper input validation (CWE-20), which can be exploited by a remote attacker with network access to execute arbitrary commands on the device. The vulnerability does not require privileges or user interaction, making it highly critical. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No remediation or patch information is currently available, and no exploits have been reported in the wild.

Successful exploitation allows an unauthenticated attacker on the network to execute arbitrary commands on the UniFi Enterprise Audio/Video Bridge device. This can lead to full compromise of the device, including unauthorized access, data manipulation, and denial of service. The critical CVSS score of 9.8 reflects the severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device to trusted users only and monitor for unusual activity. Follow vendor communications closely for updates on patches or mitigations.