Improper Input Validation Flaw in UniFi Access Application by Ubiquiti
CVE-2026-77543

9.9CRITICAL

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Access Application
Vendor
CVE Published:
26 August 2026

What is CVE-2026-77543?

A vulnerability exists in the UniFi Access Application due to improper input validation. This flaw can be exploited by an unauthorized individual with access to the network, allowing them to perform command injection on the host device. It is essential for users to apply the latest security updates from Ubiquiti to mitigate this risk.

Affected Version(s)

UniFi Access Application 0 < 4.3.5

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.