Improper Input Validation in UniFi Talk Application
CVE-2026-77554

10CRITICAL

Key Information:

Vendor
CVE Published:
26 August 2026

What is CVE-2026-77554?

A flaw in the UniFi Talk Application allows an attacker with network access to exploit improper input validation, potentially leading to command injection on the host device. This vulnerability can be leveraged to inject malicious commands, compromising the security and functionality of the application. Operators of the UniFi Talk Application should ensure that their systems are updated and properly secured against this type of exploitation.

Affected Version(s)

UniFi Talk Application 0 < 5.3.2

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.