CVE-2026-77545: Critical severity Ubiquiti UniFi OS vulnerability
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need before exploiting this issue?
The attacker needs network access and low-privilege access to the affected UniFi OS device or instance. User interaction is also required under the stated attack conditions.
What is the likely impact of successful exploitation?
Successful exploitation can escalate privileges within the affected UniFi OS device or instance. The supplied vector indicates high impact to confidentiality, integrity, and availability, with scope changed.
Are all UniFi OS deployments confirmed to be affected?
No. The available information says the issue affects certain devices running UniFi OS and is exploitable only under certain conditions; it does not identify affected versions, device models, or default configuration status.