Improper Access Control Vulnerability in UniFi Connect Application by Ubiquiti
CVE-2026-77538

8.2HIGH

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Connect Application
Vendor
CVE Published:
26 August 2026

What is CVE-2026-77538?

The UniFi Connect Application is susceptible to an improper access control vulnerability, allowing a malicious actor with network access to escalate their privileges within the application. This exploitation could potentially lead to unauthorized access to sensitive functionalities and data within the UniFi Connect environment.

Affected Version(s)

UniFi Connect Application 0 < 3.24.22

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.