High severity8.2NVD Advisory· Published Aug 26, 2026· Updated Aug 28, 2026
CVE-2026-77538
CVE-2026-77538
Description
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
2- 21 Critical Ubiquiti UniFi Flaws Enable Authentication Bypass, Command Injection and Privilege EscalationCyber Security News · Aug 26, 2026
- Ubiquiti UniFi: 16 Critical Vulnerabilities Disclosed Together Enable RCE and Auth BypassVypr Intelligence · Aug 26, 2026