CVE Catalog
CVE-2026-77543
CriticalCVSS 9.9Summary
An attacker with network access and low privileges can exploit an improper input validation vulnerability in the UniFi Access Application to execute a command injection on the host device.
Risk Assessment
Risk of arbitrary command execution on the host, potentially leading to device takeover and network compromise.
Recommendation
Update the UniFi Access Application to the latest version and restrict network access to the application.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.