CVE-2026-77534
Received Received - Intake

Improper Access Control in UniFi OS Devices

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-77534
EUVD
EUVD-2026-66382

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_os *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Access Control issue in UniFi OS devices. A malicious actor with network access and low privileges could exploit it to escalate their privileges within the UniFi OS system.

Impact Analysis

An attacker could gain higher privileges on UniFi OS devices, potentially allowing them to take control of the system, access sensitive data, or perform unauthorized actions.

Mitigation Strategies

Update UniFi OS to the latest patched version immediately to address the Improper Access Control vulnerability. Ensure network segmentation to limit low-privilege access to critical systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77534. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart