UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products

UBIQUITI'S Security Advisory Bulletin 067 (August 26, 2026) addresses 22 vulnerabilities in its UniFi product line, with three critical flaws (CVSS 10.0) allowing command injection. Notable CVEs include CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554, all needing prompt updates. The vulnerabilities can compromise network and physical security, but no active exploitation has been confirmed. Users are advised to update affected products immediately to mitigate risks.