Critical severity9.9NVD Advisory· Published Aug 26, 2026· Updated Aug 28, 2026
CVE-2026-77533
CVE-2026-77533
Description
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
2- 21 Critical Ubiquiti UniFi Flaws Enable Authentication Bypass, Command Injection and Privilege EscalationCyber Security News · Aug 26, 2026
- Ubiquiti UniFi: 16 Critical Vulnerabilities Disclosed Together Enable RCE and Auth BypassVypr Intelligence · Aug 26, 2026