CVE-2026-77536: Critical severity Ubiquiti UniFi OS vulnerability
Published Aug 26, 2026
·Updated
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Affected Software
1 affected component
Ubiquiti UniFi OS
Event History
Aug 26, 2026
CVE Published
via MITRE·09:35 AM
Data Sourced
via MITRE·09:35 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated account or other existing access?
Yes. The reported attack scenario requires network access and low privileges on a vulnerable UniFi OS device or instance; the provided information does not describe unauthenticated exploitation.