Improper Input Validation in UniFi Protect Application by Ubiquiti
CVE-2026-77548

9.9CRITICAL

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Protect Application
Vendor
CVE Published:
26 August 2026

What is CVE-2026-77548?

A vulnerability in the UniFi Protect Application allows a malicious actor with network access and low privileges to exploit improper input validation. This flaw can result in command injection on the host device, potentially leading to unauthorized actions or data exposure. Users of the UniFi Protect Application should be cautious and implement recommended security measures to mitigate the risk.

Affected Version(s)

UniFi Protect Application 0 < 7.2.105

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.