CVE-2026-77538

HighCVSS 8.2/10Last modified Aug 28, 2026

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Aug 26, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-775399.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-77546.5IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration anCVE-2026-775409.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS CVE-2026-775419.1A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi NetwoCVE-2026-775429.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID EnterCVE-2026-775439.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775447.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exCVE-2026-775459.0A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability fCVE-2026-775469.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775479.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775489.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi ProtCVE-2026-775499.0A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnera
CVE-2026-77538: High severity, CVSS 8.2 | Vulnix