Threat database

CVE-2026-77548 is a critical Improper Input Validation vulnerability in the Ubiquiti Inc UniFi Protect Application. It allows a malicious actor with network access and low privileges to perform command injection on the host device. The vulnerability has a CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation has been confirmed yet.

CVE-2026-77547 is a critical Improper Input Validation vulnerability in the Ubiquiti Inc UniFi Access Application. It allows a malicious actor with network access and low privileges to perform command injection on the host device. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation has been confirmed yet. There are no known exploits in the wild at this time.

CVE-2026-77546 is a critical Improper Input Validation vulnerability in the Ubiquiti Inc UniFi Access Application. It allows a low-privileged attacker with network access to perform command injection on the host device, potentially leading to full system compromise. The vulnerability has a CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-77545 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving active debug code. An attacker with network access and low privileges could exploit this flaw under certain conditions to escalate their privileges within the affected UniFi OS devices or instances. The vulnerability has a high CVSS score of 9.0, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-77543 is a critical vulnerability in the Ubiquiti Inc UniFi Access Application involving improper input validation that allows a low-privileged network user to perform command injection on the host device. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-77542 is a critical vulnerability in Ubiquiti Inc's UID Enterprise Agent involving improper input validation. An attacker with network access and high privileges could exploit this flaw to perform command injection on the host device. The vulnerability has a CVSS score of 9.1, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-77541 is an improper access control vulnerability in the Ubiquiti Inc UniFi Network Application. It allows a malicious actor with network access and high privileges to escalate their privileges within the application. The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality, integrity, and availability. No specific affected versions or patch information are provided.

CVE-2026-77540 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving improper input validation that allows a privileged network user to perform command injection on the host device. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-77539 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving improper input validation. An attacker with network access and high privileges can exploit this flaw to perform command injection on the host device. This vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.

CVE-2026-77538 is an improper access control vulnerability in the Ubiquiti Inc UniFi Connect Application. It allows a malicious actor with network access to escalate privileges within the application. The vulnerability has a high severity score of 8.2 and does not currently have a known patch or official remediation. No known exploits are reported in the wild.

CVE-2026-77537 is a critical vulnerability in the Ubiquiti Inc UniFi Protect Application involving improper input validation that allows an unauthenticated network attacker to perform command injection on the host device. This vulnerability has a CVSS score of 10.0, indicating it can lead to complete compromise of confidentiality, integrity, and availability. No patch or official remediation guidance has been provided yet.

CVE-2026-77536 is a critical Improper Access Control vulnerability in Ubiquiti Inc's UniFi OS Server. It allows a malicious actor with network access and low privileges to escalate their privileges within affected UniFi OS devices or instances. The vulnerability has a CVSS score of 9.9, indicating a high severity with potential complete compromise of confidentiality, integrity, and availability. No specific affected versions or patches have been disclosed yet, and no known exploits are reported in the wild.

CVE-2026-77535 is a critical vulnerability in Ubiquiti Inc's UniFi Network Application involving improper input validation. A malicious actor with network access and high privileges can exploit this flaw to perform command injection on an adopted device. The vulnerability has a high CVSS score of 9.1, indicating severe impact on confidentiality, integrity, and availability. No specific affected versions or patches have been provided yet, and there are no known exploits in the wild at this time.

CVE-2026-77534 is a critical Improper Access Control vulnerability in Ubiquiti Inc's UniFi OS Server. It allows a malicious actor with network access and low privileges to escalate their privileges within affected UniFi OS devices or instances. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No specific affected versions or patches have been disclosed yet. There are no known exploits in the wild at this time.

CVE-2026-77533 is a critical vulnerability in the Ubiquiti Inc UniFi Protect Application involving improper input validation. An attacker with network access and low privileges could exploit this flaw to perform command injection on the host device, potentially leading to full system compromise. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance has been provided yet. There are no known exploits in the wild at this time.

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.

A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vulnerability found in UniFi Network Application to persist privileges within UniFi Network Application after such access had been removed.

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.

A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerability found in UniFi Protect Application to escalate privileges on the host device.