CVE Catalog
CVE-2026-77552
CriticalCVSS 9.8Summary
An attacker with network access could exploit an Improper Input Validation vulnerability in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.
Risk Assessment
Command injection could allow the attacker to execute remote code, potentially leading to device and network compromise.
Recommendation
It is recommended to update the device firmware and restrict network access to necessary services.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device.