Paper/Archive/CVE-2026-77553

CVE-2026-77553

Ubiquiti Inc UniFi Access Application — A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Acc…

EPSS 0.5%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 40.6.406 × 208.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

Affected

ProductAffectedFixed inSource

UniFi Access Application< 4.3.54.3.5CNA

Scores by source

Ubiquiti (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9