Improper Input Validation in UniFi Protect Application by Ubiquiti
CVE-2026-77533

9.9CRITICAL

Key Information:

Vendor
CVE Published:
26 August 2026

What is CVE-2026-77533?

A vulnerability in the UniFi Protect Application allows an attacker within the network, possessing low-level permissions, to exploit improper input validation. This can lead to a command injection on the hosting device, potentially compromising the integrity and confidentiality of the system. Users are encouraged to apply the latest security updates to mitigate this risk. For more details, refer to the Ubiquiti security advisory.

Affected Version(s)

UniFi Protect Application 0 < 7.2.105

References

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.