CVE-2026-77550
Received Received - Intake

Improper CRLF Neutralization in UniFi OS Devices

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-77550
EUVD
EUVD-2026-66399

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_os *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-93 The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Neutralization of CRLF Sequences issue in UniFi OS devices. A malicious actor on the same network could exploit it to bypass authentication and gain unauthorized access to UniFi OS devices or instances.

Impact Analysis

An attacker could exploit this to bypass authentication, potentially gaining full control over affected UniFi OS devices or instances. This could lead to unauthorized access, data breaches, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must address this to maintain data protection and regulatory compliance.

Mitigation Strategies

Immediately update UniFi OS devices to the latest patched version to address the CRLF sequence vulnerability. Isolate affected devices from the network if possible until patched. Monitor network traffic for unusual authentication bypass attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77550. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart