CVE Catalog
CVE-2026-77539
CriticalCVSS 9.1Summary
An attacker with network access and high privileges can exploit an improper input validation vulnerability in UniFi OS Server to execute a command injection on the host device.
Risk Assessment
Risk of arbitrary command execution on the host, potentially leading to full server compromise.
Recommendation
Update UniFi OS Server to the latest version and restrict network access to the server.
Original NVD description (English source)
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.