VulnSocial

CVE-2026-77533Disclosure

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 3 mentions (2026-08-26); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-08-26: 3Mentions · 2026-08-28: 1Patch / Workaround · 2026-08-26: 1Technical Details · 2026-08-26: 3Technical Details · 2026-08-28: 108-2608-28
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-263
Disclosure2Patch1
2026-08-281
Disclosure1
Full discourse4 posts
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 Ubiquiti, UniFi ürün ailesinde 21 kritik güvenlik açığını kapattı. CVE-2026-77533, CVE-2026-77537 ve benzeri açıklar; uygun girdilerin doğrulanmaması nedeniyle komut enjeksiyonuna, CVE-2026-77534/77536 gibi açıklar yetki yükseltmeye, CVE-2026-77549 ve CVE-2026-77550 ise kimlik doğrulama atlatmaya yol açabiliyor. Açıkların CVSS skorları 8.2 ile 10.0 arasında değişirken, bazı senaryolarda ağ erişimi olan düşük yetkili bir saldırganın UniFi cihazında yönetici seviyesinde kontrol elde etmesi mümkün. Etkilenen ürünler arasında UniFi OS, Protect, Network, Access, Talk ve Connect bulunuyor. Kullanıcıların cihaz ve uygulamalarını güncellemesi öneriliyor.

    Post summary

    Ubiquiti disclosed 21 critical vulnerabilities affecting multiple UniFi products, detailing their impact and CVSS scores, and urged users to apply patches.

    00052623
    2.4K followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen CVE-2026-77533 in UniFi Protect: Kritische Command-Injection mit Netzwerkzugang #cve202677533 #ubiquiti #unifiprotectapplication https://cybersecurity-news.de/cve-2026-77533-unifi-protect-command-injection

    Post summary

    The notice reports a critical command injection vulnerability (CVE‑2026‑77533) in UniFi Protect with network access, but does not include a PoC, exploit code, patch, or evidence of active exploitation.

    0000064
    10 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-77533 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute… https://www.cve.org/CVERecord?id=CVE-2026-77533 ----- Traducción: CVE-2026-77533 Un … https://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑77533, indicating an Improper Input Validation flaw in UniFi Protect that could allow execution for low‑privileged network users; no PoC, exploit, or patch is mentioned.

    0000072
    102 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-77533 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute… https://www.cve.org/CVERecord?id=CVE-2026-77533

    Post summary

    The snippet announces CVE-2026-77533 as an Improper Input Validation flaw in UniFi Protect Application that could allow execution but lacks details on exploit or mitigation.

    00000698
    58.0K followersView on X

Explore more

Back to dashboard