CVE-2026-77545

Deferred Deferred - Pending Action

Active Debug Code Privilege Escalation in UniFi OS

Publication date: 2026-08-26

Last updated on: 2026-08-27

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-27

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-14

NVD

CVE-2026-77545

EUVD

EUVD-2026-66390

Affected Vendors & Products

Vendor	Product	Version / Range
ubiquiti	unifi_os	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-489	The product is released with debugging code still enabled or active.

Attack-Flow Graph

Executive Summary

This vulnerability allows a low-privilege attacker with network access to escalate privileges on UniFi OS devices by exploiting active debug code under specific conditions.

Detection Guidance

Detection requires checking UniFi OS devices for active debug code or unusual privilege escalation patterns. Monitor logs for unexpected privilege changes or debug mode activations. No specific commands are provided in the available context.

Impact Analysis

An attacker could gain higher privileges, potentially allowing them to take control of UniFi OS devices, access sensitive data, or disrupt operations.

Compliance Impact

The vulnerability allows privilege escalation with high impact on confidentiality, integrity, and availability. This could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health data security) requirements for access controls and data protection.

Mitigation Strategies

Disable debug code features if enabled, restrict network access to UniFi OS devices, and update to the latest patched version of UniFi OS immediately.

Hi! I’m here to help you understand CVE-2026-77545. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70