CVE-2026-77554
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
An attacker with network access could exploit an Improper Input Validation vulnerability in UniFi Talk Application to execute a Command Injection on the host device.
Risk Assessment
Command injection could allow the attacker to execute arbitrary commands on the device, potentially leading to full system compromise.
Recommendation
It is recommended to update UniFi Talk Application to the latest version and monitor network traffic for suspicious activities.
Other vulnerabilities in UniFi Talk Application
See all- CVE-2026-50747Critical
An authenticated SQL Injection vulnerability in UniFi Talk Application allows a network-accessible attacker with low privileges to escalate privileges on the host device.
- CVE-2026-55119High
An Improper Access Control vulnerability in UniFi Talk Application allows privilege escalation. An attacker with network access and low privileges can exploit this flaw.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS