Out-of-bounds Read Vulnerability in UniFi Gateway Devices by Ubiquiti
CVE-2026-77556

7.5HIGH

Key Information:

Vendor

Ubiquiti Inc

Status
Dream Machines
Enterprise Firewalls
Dream Routers
Cloud Gateways
Vendor
CVE Published:
22 September 2026

What is CVE-2026-77556?

An Out-of-bounds Read vulnerability has been identified in certain UniFi gateway devices manufactured by Ubiquiti. This flaw allows a malicious actor with access to the network to potentially execute a Denial of Service (DoS) attack, disrupting the functionality of the device. Network administrators should take immediate action to secure their systems against exploitation of this intricate vulnerability.

Affected Version(s)

Cloud Gateways 0 < 5.1.31

Dream Machines 0 < 5.1.31

Dream Routers 0 < 5.1.31

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.