CVE-2026-77537

CriticalCVSS 10.0/10Last modified Aug 28, 2026

Description

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-775388.2A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to esCVE-2026-775399.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-77546.5IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration anCVE-2026-775409.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-775419.1A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi NetwoCVE-2026-775429.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID EnterCVE-2026-775439.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775447.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exCVE-2026-775459.0A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability fCVE-2026-775469.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775479.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775489.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
CVE-2026-77537: Critical severity, CVSS 10.0 | Vulnix