CVE-2026-77533: Input Validation
Published Aug 26, 2026
·Updated
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Affected Software
1 affected component
UniFi Protect Application
Event History
Aug 26, 2026
CVE Published
via MITRE·08:57 AM
Data Sourced
via MITRE·08:57 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require user interaction or administrative access?
No user interaction is required. The attacker needs network access and low privileges; the attack complexity is rated low.
2
What is the potential impact of successful exploitation?
Successful exploitation can result in high impact to confidentiality, integrity, and availability on the host device. The CVSS vector also indicates the vulnerability can affect a scope beyond the initially vulnerable component.