CVE-2026-77555
Deferred Deferred - Pending Action

Out-of-Bounds Write in UniFi Gateway Devices Leads to DoS

Vulnerability report for CVE-2026-77555, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_gateway *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Out-of-bounds Write flaw in certain UniFi gateway devices. A malicious actor with network access could exploit it to cause a Denial of Service (DoS) attack on the affected device.

Impact Analysis

The vulnerability could allow an attacker to crash or disable your UniFi gateway device, disrupting network services and causing downtime for connected systems.

Compliance Impact

This vulnerability could lead to a Denial of Service (DoS) attack on UniFi gateway devices, potentially disrupting network availability. While not directly impacting data confidentiality or integrity, prolonged DoS conditions may hinder compliance with GDPR's availability principle or HIPAA's access requirements by preventing timely data access.

Mitigation Strategies

Update UniFi gateway devices to the latest firmware version to patch the Out-of-bounds Write vulnerability. Isolate affected devices from critical network segments if updates are not immediately available. Monitor network traffic for unusual patterns indicating potential DoS attacks targeting the gateway.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77555. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart