by Kastro
Paper/Archive/CVE-2026-77541

CVE-2026-77541

Ubiquiti Inc UniFi Network Application — A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Ne…

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 40.1.401 × 208.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.

Affected

ProductAffectedFixed inSource
UniFi Network Application< 10.5.6710.5.67CNA

Scores by source

Ubiquiti (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9