CVE-2026-77541 PUBLISHED

Assigner: Ubiquiti
Reserved: 20.08.2026 Published: 26.08.2026 Updated: 26.08.2026

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.1

Product Status

Vendor Ubiquiti Inc
Product UniFi Network Application
Versions Default: unaffected
  • affected from 0 to 10.5.67 (excl.)

References

Problem Types

  • CWE-284 Improper Access Control - Generic CWE