Improper Input Validation in UniFi Protect Application by Ubiquiti Networks
CVE-2026-77537

10CRITICAL

Key Information:

Vendor
CVE Published:
26 August 2026

What is CVE-2026-77537?

The UniFi Protect Application by Ubiquiti Networks contains an improper input validation vulnerability that may allow unauthorized users on the network to exploit this weakness. This exploitation could lead to command injection attacks on the host device, potentially compromising the security of the entire network environment. It is crucial for users to be aware of this vulnerability and implement recommended security measures to safeguard their systems.

Affected Version(s)

UniFi Protect Application 0 < 7.2.105

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.