CVE-2026-77549
Received Received - Intake

Improper CRLF Neutralization in UniFi OS Devices

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-77549
EUVD
EUVD-2026-66398

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_os *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-93 The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Neutralization of CRLF Sequences issue in UniFi OS devices. A malicious actor with network access could exploit it to bypass authentication on affected devices or instances under specific conditions.

Impact Analysis

An attacker could gain unauthorized access to UniFi OS devices, potentially leading to data breaches, unauthorized configuration changes, or full system compromise. This could affect network security and device integrity.

Compliance Impact

This vulnerability could lead to unauthorized access and data exposure, which may violate compliance requirements such as GDPR or HIPAA. Organizations may face penalties or legal consequences if such breaches occur due to inadequate security measures.

Mitigation Strategies

Update UniFi OS devices to the latest patched version immediately. Isolate affected devices from critical network segments. Monitor network traffic for unusual authentication bypass attempts. Review and enforce strict network access controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77549. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart