CVE Catalog
CVE-2026-77550
CriticalCVSS 10.0Summary
An attacker with network access could exploit an Improper Neutralization of CRLF Sequences vulnerability in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Risk Assessment
Authentication bypass could allow the attacker unauthorized access to devices, potentially leading to compromise of the entire infrastructure.
Recommendation
It is recommended to apply vendor patches immediately and implement additional authentication mechanisms such as MFA.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.