CVE-2026-77534

CriticalCVSS 9.9/10Last modified Aug 28, 2026

Description

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-775359.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi NetCVE-2026-775369.9A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviCVE-2026-7753710.0A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to CVE-2026-775388.2A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to esCVE-2026-775399.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-77546.5IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration anCVE-2026-775409.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-775419.1A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi NetwoCVE-2026-775429.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID EnterCVE-2026-775439.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775447.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exCVE-2026-775459.0A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability f
CVE-2026-77534: Critical severity, CVSS 9.9 | Vulnix