CVE-2026-77553: CWE-284 Improper Access Control - Generic in Ubiquiti Inc UniFi Access Application

This vulnerability (CVE-2026-77553) in the UniFi Access Application involves improper access control (CWE-284). An attacker with low privileges but network access can exploit this flaw to escalate privileges on the host device, potentially gaining full control. The CVSS v3.1 base score is 9.9, reflecting network attack vector, low attack complexity, no user interaction, and complete compromise of confidentiality, integrity, and availability. The vendor has published the vulnerability but has not provided a remediation level or patch information. The affected versions are not explicitly stated.

Successful exploitation could allow an attacker with limited access to the network to gain elevated privileges on the host device running the UniFi Access Application. This could lead to full system compromise, including unauthorized access to sensitive data and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to trusted users and monitor for suspicious activity related to privilege escalation attempts.