CVE-2026-77558
Deferred Deferred - Pending Action

Out-of-Bounds Read in UniFi Gateway Devices Leading to DoS

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: fe490ce8-0395-4072-90d8-2707e1bdf984

Description
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-77558
EUVD
EUVD-2026-84756

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ubiquiti unifi_gateway *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Out-of-bounds Read flaw in certain UniFi gateway devices. A malicious actor with network access could exploit it to cause a Denial of Service (DoS) attack on the affected device.

Impact Analysis

The vulnerability allows an attacker to disrupt the normal operation of your UniFi gateway device, potentially causing it to crash or become unresponsive. This could lead to network downtime or loss of connectivity for devices relying on the gateway.

Mitigation Strategies

Update UniFi gateway devices to the latest firmware version to patch the Out-of-bounds Read vulnerability. Isolate affected devices from critical network segments if updates cannot be applied immediately. Monitor network traffic for unusual patterns indicating potential DoS attempts targeting the gateway.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77558. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart