Ubiquiti Releases Security Advisory Bulletin for Multiple Critical Vulnerabilities in UniFi Products

Ubiquiti has released a security advisory to address multiple critical vulnerabilities in UniFi products. Successful exploitation could allow command injection, authentication bypass, privilege escalation, or compromise of affected devices and management platforms. 

Of the 22 vulnerabilities listed in the advisory, 21 have CVSSv3.1 scores that are 9.0 or higher (considered critical). All vulnerabilities are exploitable via network access, with some requiring no authentication or user interaction. Some of these vulnerabilities have been highlighted below.

• CVE-2026-77537 - Improper Input Validation (Command Injection) - CVSSv3.1: 10.0.

  A malicious actor with network access could exploit this vulnerability in UniFi Protect Application to execute command injection on the host device. 

• CVE-2026-77550 - Improper Neutralisation of CRLF Sequences - CVSSv3.1: 10.0.

  A malicious actor with network access could exploit this vulnerability in UniFi OS devices to bypass authentication without requiring user interaction. 

• CVE-2026-77554 - Improper Input Validation (Command Injection) - CVSSv3.1: 10.0.  

  A malicious actor with network access could exploit this vulnerability in UniFi Talk Application to execute command injection on the host device. 

• CVE-2026-77549 - Improper Neutralisation of CRLF Sequences - CVSSv3.1: 9.0.

  Under certain conditions, a malicious actor with network access could exploit this vulnerability in UniFi OS devices to bypass authentication. 

• CVE-2026-77538 - Improper Access Control - CVSSv3.1: 8.2.

  A malicious actor with network access could exploit this vulnerability in UniFi Connect Application to escalate privileges within the application. Ubiquiti notes that this vulnerability may be chained with other dependency vulnerabilities to escalate privileges on the host device. 

17 other vulnerabilities are covered in the advisory.