CVE-2026-77543

CriticalCVSS 9.9/10Last modified Aug 28, 2026

Description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Ubiquiti IncUniFi Access Application< 4.3.5

References

Timeline

Published
Aug 26, 2026
Last modified
Aug 28, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-775447.5A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to exCVE-2026-775459.0A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability fCVE-2026-775469.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775479.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi AcceCVE-2026-775489.9A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi ProtCVE-2026-775499.0A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulneraCVE-2026-77558.8IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to incomplete validation enforcement on MCP server confCVE-2026-7755010.0A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devicCVE-2026-775519.0A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UnCVE-2026-775529.8A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video CVE-2026-775539.9A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi AccessCVE-2026-7755410.0A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exe
CVE-2026-77543: Critical severity, CVSS 9.9 | Vulnix