CVE-2026-77553
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
An attacker with network access and low privileges could exploit an Improper Access Control vulnerability in UniFi Access Application to escalate privileges on the host device.
Risk Assessment
Privilege escalation could allow the attacker to access sensitive functions and data, potentially leading to system security compromise.
Recommendation
It is recommended to apply vendor patches and review/restrict user privileges in UniFi Access Application.
Other vulnerabilities in UniFi Access Application
See all- CVE-2026-77547Critical
An attacker with network access and low privileges could exploit an Improper Input Validation vulnerability in UniFi Access Application to execute a Command Injection on the host device.
- CVE-2026-77546Critical
An attacker with network access and low privileges could exploit an Improper Input Validation vulnerability in UniFi Access Application to execute a Command Injection on the host device.
- CVE-2026-77543Critical
An attacker with network access and low privileges can exploit an improper input validation vulnerability in the UniFi Access Application to execute a command injection on the host device.
- CVE-2026-54400Critical
A vulnerability in UniFi Access Application allows privilege escalation on the host device. An attacker with network access and high privileges can exploit improper access control.
- CVE-2026-50748Critical
A vulnerability in the UniFi Access Application allows an attacker with network access and low privileges to execute command injection on the host device due to improper input validation.
- CVE-2026-55117High
A Path Traversal vulnerability in UniFi Access Application allows a malicious actor with network access to read files on the host device.
Original NVD description (English source)
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS