CVE-2026-77538: High severity UniFi Connect Application vulnerability
Published Aug 26, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application.
Affected Software
1 affected component
UniFi Connect Application
Event History
Aug 26, 2026
CVE Published
via MITRE·09:47 AM
Data Sourced
via MITRE·09:47 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue can be exploited by a malicious actor with network access. No privileges or user interaction are required according to the supplied vector.
2
What is the likely impact of successful exploitation?
Successful exploitation allows privilege escalation within the UniFi Connect Application. The supplied severity vector indicates high integrity impact and low availability impact, with no confidentiality impact.