Critical severity9.0NVD Advisory· Published Aug 26, 2026· Updated Aug 28, 2026
CVE-2026-77549
CVE-2026-77549
Description
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
2- 21 Critical Ubiquiti UniFi Flaws Enable Authentication Bypass, Command Injection and Privilege EscalationCyber Security News · Aug 26, 2026
- Ubiquiti UniFi: 16 Critical Vulnerabilities Disclosed Together Enable RCE and Auth BypassVypr Intelligence · Aug 26, 2026