Vulnerability intelligence
CVE-2026-77537
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVSS Score
10
Critical
EPSS — Exploit Probability
1.6%
Riskier than 76% of all CVEs · checked 2026-10-09
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Aug 26, 2026 · latest Aug 26, 2026
Coverage timeline
-
UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Productssecurityonline.info · Aug 26, 2026