Vulnerability intelligence
CVE-2026-77550
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVSS Score
10
Critical
EPSS — Exploit Probability
0.8%
Riskier than 55% of all CVEs · checked 2026-10-09
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Aug 26, 2026 · latest Aug 26, 2026
Coverage timeline
-
UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Productssecurityonline.info · Aug 26, 2026