CVE-2026-77546

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...

EUVD-2026-66404

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

CVE-2026-77557 is a critical (CVSS 9.8) Improper Access Control vulnerability in UniFi Protect AI Key . A malicious actor with network access can exploit it to escalate privileges on the device, with no prior authentication required (PR:N). The attack vector is network-based with low complexity, ...

CVE-2026-77554

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

EUVD-2026-66403

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...

CVE-2026-77554

CVE-2026-77554 is a CRITICAL (CVSS 10.0) Improper Input Validation vulnerability in the UniFi Talk Application by Ubiquiti, which can be exploited over the network with no privileges required and no user interaction to achieve Command Injection on the host device. The changed scope and high impac...

EUVD-2026-66402

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77553

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77553

CVE-2026-77553 is a CRITICAL (CVSS 9.9) Improper Access Control vulnerability in the UniFi Access Application (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges on the host device , with high impact on confidentiality, integrity, and availability. The att...

CVE-2026-77552

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

EUVD-2026-66401

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...

CVE-2026-77552

UniFi Enterprise Audio/Video Bridge (by Ubiquiti) is affected by an Improper Input Validation vulnerability that allows a network-accessible malicious actor to execute a Command Injection on the device. The flaw requires no authentication or user interaction, yielding a CVSS 3.1 score of 9.8 (CRI...

CVE-2026-77551

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

EUVD-2026-66400

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

CVE-2026-77551

An Improper Access Control vulnerability in UniFi Connect Display Cast Pro allows a network-based attacker, under certain conditions, to escalate privileges on the device. The flaw is scored CVSS 9.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity, and availability. ...

CVE-2026-77550

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

CVE-2026-77550

UniFi OS is affected by an Improper Neutralization of CRLF Sequences vulnerability that allows a network-level attacker to bypass authentication on affected devices or instances. The vulnerability is rated CVSS 3.1 10.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity...

CVE-2026-77549

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances...

CVE-2026-77549

CVE-2026-77549 is a CRLF injection (Improper Neutralization of CRLF Sequences) vulnerability in UniFi OS , affecting certain devices running the platform. A network-based attacker with no prior authentication, under certain conditions, can exploit this flaw to bypass authentication on affected Un...