CVE-2026-77545
Received Received - Intake

Active Debug Code Privilege Escalation in UniFi OS

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-77545
EUVD
EUVD-2026-66390

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_os *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-489 The product is released with debugging code still enabled or active.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a low-privilege attacker with network access to escalate privileges on UniFi OS devices by exploiting active debug code under specific conditions.

Impact Analysis

An attacker could gain higher privileges, potentially allowing them to take control of UniFi OS devices, access sensitive data, or disrupt operations.

Mitigation Strategies

Disable debug code features if enabled, restrict network access to UniFi OS devices, and update to the latest patched version of UniFi OS immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77545. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart