CVE-2026-77547: Input Validation
Published Aug 26, 2026
·Updated
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
Affected Software
1 affected component
Ubiquiti UniFi Access Application
Event History
Aug 26, 2026
CVE Published
via MITRE·10:20 AM
Data Sourced
via MITRE·10:20 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
An attacker needs network access and low privileges in the UniFi Access Application environment. No user interaction is required.
2
What could an attacker achieve after successful exploitation?
The vulnerability can be used to execute commands on the host device. The reported impact includes high confidentiality, integrity, and availability effects, with scope change.