CVE-2026-77537: Input Validation
Published Aug 26, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Affected Software
1 affected component
Ubiquiti Unifi Protect Application
Event History
Aug 26, 2026
CVE Published
via MITRE·09:39 AM
Data Sourced
via MITRE·09:39 AM
DescriptionSeverityWeakness
News Published
via BleepingComputer·01:17 PM
News Published
via BleepingComputer·01:19 PM
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What access would an attacker need to target a deployment?
The attacker needs access to the network where the UniFi Protect Application is reachable. The provided information does not identify any additional prerequisite beyond network access.
3
What is the potential impact of successful exploitation?
Successful exploitation can result in command injection on the host device. The vulnerability is rated critical with high confidentiality, integrity, and availability impact.