CVE-2026-110459 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw to obtain information, make unauthorized changes, and cause a denial of service (DoS) on the device. The vulnerability affects versions prior to 2.2.8. It has a high severity score of 8.6 and does not require user interaction or privileges to exploit.
CVE-2026-110458 is a low severity path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access could exploit this flaw under certain conditions to create or truncate files on the affected device. No known exploits are reported in the wild. The vulnerability affects versions from 0 up to but not including 2.2.8.
CVE-2026-110457 is a path traversal vulnerability in Ubiquiti Inc's UniFi Protect AI Key. An attacker with network access and under certain conditions could exploit this flaw to read information about files on the device. The vulnerability has a low severity score of 3.7 and does not allow modification or denial of service. Affected versions are those prior to 2.2.8. No known exploits or patches are currently reported.
CVE-2026-110456 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw under certain conditions to access internal resources through the device. The vulnerability affects versions prior to 2.2.8. The CVSS score is 5.3, indicating a medium severity level. There are no known exploits in the wild and no vendor-provided patch information is available at this time.
CVE-2026-110455 is an improper input validation vulnerability in Ubiquiti Inc's UniFi Protect AI Key that allows a network-based attacker to perform command injection under certain conditions. The vulnerability affects versions from 0 up to but not including 2.2.8. It has a high severity with a CVSS score of 8.1. No official patch or remediation details are provided in the available data.
CVE-2026-110454 is an improper access control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. A malicious actor with network access could exploit this flaw to access internal resources through the device. The vulnerability affects versions from 0 up to but not including 2.2.8. The CVSS 3.1 base score is 5.3, indicating a medium severity level. There are no known exploits in the wild, and no patch or remediation information is currently provided.
CVE-2026-95862 is an out-of-bounds write vulnerability in Ubiquiti Inc's Dream Machines UniFi gateway devices. An attacker with network access could exploit this flaw to cause a Denial of Service (DoS) condition, disrupting device availability. The vulnerability does not impact confidentiality or integrity but affects device availability. It has a CVSS v3.1 score of 7.5 (high severity).
CVE-2026-95861 is an Uncontrolled Recursion vulnerability in Ubiquiti Inc Dream Machines UniFi gateway devices. An attacker with network access could exploit this flaw to cause a Denial of Service (DoS) condition, disrupting device availability. The vulnerability affects multiple versions prior to 5.1.31, 4.0.21, and 5.1.26. The CVSS score is 7.5, indicating high severity. No known exploits are reported in the wild. No official patch or vendor advisory details are provided in the input.
CVE-2026-77558 is an out-of-bounds read vulnerability in Ubiquiti Inc's Dream Machines UniFi gateway devices. An attacker with network access can exploit this flaw to cause a denial of service (DoS) condition, disrupting device availability. The vulnerability does not impact confidentiality or integrity but affects device availability. It has a high severity score of 7.5. Multiple affected versions exist prior to 5.1.31, 4.0.21, and 5.1.26. No vendor advisory or patch information is provided, so patch status is not confirmed.
CVE-2026-77556 is an out-of-bounds read vulnerability in Ubiquiti Inc's Dream Machines UniFi gateway devices. This flaw allows a network-based attacker to cause a denial of service (DoS) by exploiting the memory access error. The vulnerability does not impact confidentiality or integrity but results in service disruption. It affects multiple versions prior to 5.1.31, 4.0.21, and 5.1.26. No known exploits are reported in the wild. The CVSS score is 7.5, indicating high severity.
CVE-2026-77555 is an out-of-bounds write vulnerability in Ubiquiti Inc Dream Machines UniFi gateway devices. A network attacker could exploit this flaw to cause a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but affects availability. It has a high severity with a CVSS score of 7.5. Multiple affected versions exist prior to specific fixed releases.
CVE-2026-77544 is an out-of-bounds write vulnerability in Ubiquiti Inc Dream Machines UniFi gateway devices. An attacker with network access could exploit this flaw to cause a denial of service (DoS) on the affected device. The vulnerability does not impact confidentiality or integrity but results in service disruption. It affects multiple versions prior to 4.0.21 and 5.1.26/5.1.31. No known exploits are reported in the wild. The CVSS 3.1 score is 7.5 (high severity).
CVE-2026-77532 is a heap-based buffer overflow vulnerability in Ubiquiti Inc's EdgeMAX EdgeSwitch devices with DHCPv6 enabled. An attacker on an adjacent network can exploit this flaw to achieve remote code execution without user interaction. The vulnerability affects EdgeSwitch versions from 0 up to but not including 1.12.2. It has a high severity rating with a CVSS score of 8.8. No official patch information is provided in the input data.
CVE-2026-77557 is a critical Improper Access Control vulnerability in Ubiquiti Inc's UniFi Protect AI Key. It allows a malicious actor with network access to escalate privileges on the affected device without requiring user interaction. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-77554 is a critical vulnerability in the Ubiquiti Inc UniFi Talk Application involving improper input validation that allows an unauthenticated network attacker to perform command injection on the host device. The vulnerability has a CVSS score of 10, indicating maximum severity with full impact on confidentiality, integrity, and availability. No patch or official remediation guidance has been provided yet.
CVE-2026-77553 is a critical Improper Access Control vulnerability in Ubiquiti Inc's UniFi Access Application. It allows a malicious actor with network access and low privileges to escalate their privileges on the host device. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.
CVE-2026-77552 is a critical vulnerability in Ubiquiti Inc's UniFi Enterprise Audio/Video Bridge involving improper input validation. This flaw allows a network-based attacker to perform command injection on the affected device without requiring privileges or user interaction. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No specific affected versions or patches have been disclosed yet. There are no known exploits in the wild at this time.
CVE-2026-77551 is an improper access control vulnerability in Ubiquiti Inc's UniFi Connect Display Cast Pro. A malicious actor with network access could exploit this flaw to escalate privileges on the device. The vulnerability has a critical severity with a CVSS score of 9. No specific affected versions or patches are currently documented.
CVE-2026-77550 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving improper neutralization of CRLF sequences (CRLF injection). This flaw allows a malicious actor with network access to potentially bypass authentication on affected UniFi OS devices or instances. The vulnerability has a maximum CVSS score of 10, indicating severe impact on confidentiality, integrity, and availability. No specific affected versions or patches have been provided yet, and no known exploits are reported in the wild.
CVE-2026-77549 is a critical vulnerability in Ubiquiti Inc's UniFi OS Server involving improper neutralization of CRLF sequences (CRLF injection). An attacker with network access could exploit this flaw under certain conditions to bypass authentication on affected UniFi OS devices or instances. The vulnerability has a high CVSS score of 9.0, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.