CVE Catalog
CVE-2026-77533
CriticalCVSS 9.9Exploitation Probability (EPSS)
Elevated risk1.02%
61th percentile - higher than 61% of all known CVEs
Summary
An Improper Input Validation vulnerability in UniFi Protect Application allows an attacker with network access and low privileges to execute a Command Injection on the host device.
Risk Assessment
An attacker could gain full control of the device, potentially compromising system integrity and data access.
Recommendation
Update UniFi Protect Application to the latest version. Restrict network access to the application and apply the principle of least privilege.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.