CVE-2026-77550: CRLF Injection
Published Aug 26, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Affected Software
1 affected component
Ubiquiti UniFi OS
Event History
Aug 26, 2026
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
News Published
via BleepingComputer·01:17 PM
News Published
via BleepingComputer·01:19 PM
Frequently Asked Questions
1
What level of access does an attacker need?
The attacker needs network access to a vulnerable UniFi OS device or instance. No privileges or user interaction are required.
2
What could a successful exploit allow?
A successful exploit could bypass authentication to the affected UniFi OS device or instance. The reported impact includes high confidentiality, integrity, and availability impact.