CVE-2026-77556
Deferred Deferred - Pending Action

Out-of-Bounds Read in UniFi Gateway Devices Leads to DoS

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-77556
EUVD
EUVD-2026-84755

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_gateway *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Out-of-bounds Read flaw in certain UniFi gateway devices. A malicious actor with network access can exploit it to cause a Denial of Service (DoS) attack on the affected device.

Impact Analysis

The vulnerability allows an attacker to disrupt the normal operation of your UniFi gateway device, potentially causing it to crash or become unresponsive. This could lead to network downtime or loss of connectivity for devices relying on the gateway.

Compliance Impact

This vulnerability could lead to a Denial of Service (DoS) attack on UniFi gateway devices, potentially disrupting network availability. Such disruptions may impact compliance with standards like GDPR or HIPAA, which require reliable access to systems handling personal or health data.

Mitigation Strategies

Update UniFi gateway devices to the latest firmware version to patch the Out-of-bounds Read vulnerability. Isolate affected devices from critical network segments to limit potential DoS impact. Monitor network traffic for unusual patterns indicating exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77556. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart