CVE Catalog
CVE-2026-77548
CriticalCVSS 9.9Summary
An attacker with network access and low privileges could exploit an Improper Input Validation vulnerability in UniFi Protect Application to execute a Command Injection on the host device.
Risk Assessment
Command injection could allow the attacker to execute arbitrary commands on the device, potentially leading to full system compromise.
Recommendation
It is recommended to update UniFi Protect Application to the latest version and restrict user privileges.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.