CVE Catalog
CVE-2026-77537
CriticalCVSS 10.0Summary
An attacker with network access can exploit an improper input validation vulnerability in the UniFi Protect Application to execute a command injection on the host device.
Risk Assessment
Risk of arbitrary command execution on the host, potentially leading to compromise of the surveillance system.
Recommendation
Update the UniFi Protect Application to the latest version and restrict network access to the application.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.