CVE Catalog
CVE-2026-77535
CriticalCVSS 9.1Summary
An attacker with network access and high privileges could exploit an Improper Input Validation vulnerability in UniFi Network Application to execute a Command Injection on an adopted device.
Risk Assessment
Risk of remote code execution on devices managed by UniFi Network Application, potentially leading to device compromise.
Recommendation
Update UniFi Network Application to the latest version and restrict access to trusted administrators only.
Original NVD description (English source)
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.