CVE-2026-77534Disclosure

LOWCVSS 9.9 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
3 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets2 URLs

By indicator

Full discourse3 posts

Rıdvan Yağlı@ridvanyagli45d
Patch
🔴 Ubiquiti, UniFi ürün ailesinde 21 kritik güvenlik açığını kapattı. CVE-2026-77533, CVE-2026-77537 ve benzeri açıklar; uygun girdilerin doğrulanmaması nedeniyle komut enjeksiyonuna, CVE-2026-77534/77536 gibi açıklar yetki yükseltmeye, CVE-2026-77549 ve CVE-2026-77550 ise kimlik doğrulama atlatmaya yol açabiliyor. Açıkların CVSS skorları 8.2 ile 10.0 arasında değişirken, bazı senaryolarda ağ erişimi olan düşük yetkili bir saldırganın UniFi cihazında yönetici seviyesinde kontrol elde etmesi mümkün. Etkilenen ürünler arasında UniFi OS, Protect, Network, Access, Talk ve Connect bulunuyor. Kullanıcıların cihaz ve uygulamalarını güncellemesi öneriliyor.
Post summary
Ubiquiti announced that it has patched 21 critical vulnerabilities in its UniFi product line, detailing the CVEs, severity scores, and types of flaws, and urged users to apply the updates.
00052623
2.4K followersView on X
Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-77534 A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to es… https://www.cve.org/CVERecord?id=CVE-2026-77534 ----- Traducción: CVE-2026-77534 Un … https://infoflow.cloud`
Post summary
The tweet announces CVE-2026-77534 as an Improper Access Control flaw in UniFi OS devices that could be leveraged by attackers with low privileges.
0000056
102 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-77534 A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to es… https://www.cve.org/CVERecord?id=CVE-2026-77534
Post summary
The note announces CVE-2026-77534, describing an Improper Access Control vulnerability in UniFi OS that can be exploited by low‑privilege actors.
00000648
58.0K followersView on X

Explore more

Back to dashboard