VulnSocial

CVE-2026-77537Patch

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

DECLINING

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 14 mentions across 5 observed days
  • Momentum state: declining

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 7 signals
  • Technical details provided in 9 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 4d ago at 6 mentions (2026-08-26); latest day: 1
  • 14 total mentions across 5 days

Deep dive

Activity timeline14 mentions / 5d
02356Mentions · 2026-08-26: 6Mentions · 2026-08-27: 4Mentions · 2026-08-29: 1Mentions · 2026-08-31: 2Mentions · 2026-10-10: 1PoC Mentioned / Linked · 2026-08-27: 1Patch / Workaround · 2026-08-26: 4Patch / Workaround · 2026-08-27: 1Patch / Workaround · 2026-08-29: 1Patch / Workaround · 2026-08-31: 1Technical Details · 2026-08-26: 6Technical Details · 2026-08-27: 1Technical Details · 2026-08-29: 1Technical Details · 2026-08-31: 108-2608-2708-2908-3110-10
Signal classification5 categories
Patch
753.8%
Disclosure
215.4%
General
215.4%
Exploit
17.7%
PoC
17.7%
Referenced assets8 URLs
Classification over time
DateTotalLabels
2026-08-266
Disclosure1General1Patch4
2026-08-274
Disclosure1Exploit1Patch1PoC1
2026-08-291
Patch1
2026-08-312
General1Patch1
Full discourse14 posts
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 Ubiquiti, UniFi ürün ailesinde 21 kritik güvenlik açığını kapattı. CVE-2026-77533, CVE-2026-77537 ve benzeri açıklar; uygun girdilerin doğrulanmaması nedeniyle komut enjeksiyonuna, CVE-2026-77534/77536 gibi açıklar yetki yükseltmeye, CVE-2026-77549 ve CVE-2026-77550 ise kimlik doğrulama atlatmaya yol açabiliyor. Açıkların CVSS skorları 8.2 ile 10.0 arasında değişirken, bazı senaryolarda ağ erişimi olan düşük yetkili bir saldırganın UniFi cihazında yönetici seviyesinde kontrol elde etmesi mümkün. Etkilenen ürünler arasında UniFi OS, Protect, Network, Access, Talk ve Connect bulunuyor. Kullanıcıların cihaz ve uygulamalarını güncellemesi öneriliyor.

    Post summary

    Ubiquiti announced the closure of 21 critical vulnerabilities in its UniFi product line and urges users to apply the latest updates to mitigate the risks.

    00052623
    2.4K followersView on X
  • kokumօtօ@__kokumoto
    Patch

    UbiquithがUniFiの重大(Critical)な脆弱性21件を修正。うち3件(CVE-2026-77537, CVE-2026-77550, CVE-2026-77554)がCVSSスコア10。悪用有無は開示なし。 https://www.bleepingcomputer.com/news/security/ubiquiti-patches-three-max-severity-security-vulnerabilities/

    Post summary

    Ubiquiti has issued patches for 21 critical vulnerabilities in UniFi, including three CVEs (CVE-2026-77537, CVE-2026-77550, CVE-2026-77554) each with a CVSS score of 10. No information about PoCs, exploitation tools, or active exploitation is disclosed.

    010411.4K
    7.8K followersView on X
  • Cordoba@cordobahq

    Ubiquiti patched three max-severity flaws exploitable remotely without privileges: CVE-2026-77537 (UniFi Protect), CVE-2026-77550 (UniFi OS), CVE-2026-77554 (UniFi Talk). Fixed in Protect 7.2.105, Talk 5.3.2, UniFi OS Server 5.1.21. Source: BleepingComputer

    0001055
    5 followersView on X
  • CVE Brief@DailyCVEBrief
    Patch

    DEEP DIVE — CVE-2026-77537: unauthenticated command injection in Ubiquiti UniFi Protect, CVSS 10.0. On a UDM the video recorder is also the router and firewall. Ubiquiti shipped the fix in Protect 7.2.105 two weeks before the advisory named it. https://t.co/VeyRYKARhT

    Post summary

    The tweet announces a high‑severity unauthenticated command injection CVE-2026-77537, notes that Ubiquiti already issued a patch in Protect 7.2.105, and provides core vulnerability details without mentioning exploitation or a PoC.

    1000073
    30 followersView on X
  • ExploitGrid@exploitgrid
    PoC

    [CVE] CVE-2026-77537 [HIGH PRIORITY] 🔗 https://exploitgrid.net/cve/CVE-2026-77537

    Post summary

    The post announces a high‑priority vulnerability (CVE‑2026‑77537) and directs readers to ExploitGrid, indicating that proof‑of‑concept or exploit information is available there.

    1000026
    38 followersView on X
  • ExploitGrid@exploitgrid
    Exploit

    🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-60004 - EXPLOIT CVE-2026-65956 CVE-2026-77537 CVE-2026-77550 CVE-2026-77554 ..🧵👇

    Post summary

    The digest highlights CVE‑2026‑60004 with an "EXPLOIT" tag, yet it provides no concrete exploit details, technical information, or patch guidance.

    1000047
    38 followersView on X
  • ThreatCluster@threatcluster
    Disclosure

    Three critical vulnerabilities in Ubiquiti UniFi products allow remote command execution without privileges, tracked as CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554. https://t.co/bfIqwtPWtb

    Post summary

    Three critical vulnerabilities (CVE-2026-77537, CVE-2026-77550, CVE-2026-77554) in Ubiquiti UniFi products that enable unauthenticated remote command execution have been disclosed.

    1000081
    449 followersView on X
  • Daily CyberSecurity@Daily_CyberSec
    Patch

    Ubiquiti patched 22 UniFi flaws. Three hit CVSS 10.0, including command injection CVE-2026-77537. Update UniFi Protect, OS, and Talk now. #Ubiquiti #UniFi #CyberSecurity #CommandInjection #CVE202677537 https://securityonline.info/unifi-command-injection-vulnerabilities/

    Post summary

    Ubiquiti has released patches for 22 UniFi vulnerabilities, including the severe command‑injection CVE-2026-77537, and urges users to update UniFi Protect, OS, and Talk immediately.

    01000431
    12.9K followersView on X
  • CVE Brief@DailyCVEBrief
    General

    Full Deep Dive — am-I-vulnerable check, threat model, starter YARA + Sigma rules: https://cvebrief.com/cve/CVE-2026-77537/ https://t.co/8W5epJmBa9

    Post summary

    The tweet links to a comprehensive article on CVE‑2026‑77537 but does not provide any proof‑of‑concept, exploit, patch details, or technical specifics.

    0000042
    30 followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨 Critical - Command Injection Vulnerability in Ubiquiti UniFi Protect (CVE-2026-77537) An improper input validation vulnerability in the UniFi Protect Application allows a malicious actor with network access to execute arbitrary commands on the host device. 👉 Affected: Ubiquiti UniFi Protect Application versions < 7.2.105 | Upgrade to version 7.2.105 or later immediately

    Post summary

    CVE-2026-77537 is a command‑injection flaw in Ubiquiti UniFi Protect that can be mitigated by upgrading to version 7.2.105 or later; no PoC or exploit details are provided.

    00000131
    297 followersView on X
  • PJ@Npj8448
    Patch

    🚨 Ransomware groups Qilin and Lockbit5 are active, targeting organizations like SCA Logistik &amp; Fulfillment GmbH and Displaydata. Patch high-severity vulnerabilities like CVE-2026-77537 and CVE-2026-65956 to prevent exploitation #ThreatIntel #Ransomware https://pranithjain.qzz.io/threatintel/telegram?tab=firehose

    Post summary

    The tweet warns that ransomware groups are active and urges organizations to patch CVE-2026-77537 and CVE-2026-65956 to prevent potential exploitation.

    0000077
    63 followersView on X
  • RedLegg@RedLegg
    Patch

    Security Bulletin: Multiple Critical Vulnerabilities affecting Ubiquiti products - Multiple critical Ubiquiti vulnerabilities (CVE-2026-77537, CVE-2026-77550, CVE-2026-77554) may allow command execution or authentication bypass. Update affected... https://hubs.li/Q04vrHqQ0

    Post summary

    The bulletin announces three critical Ubiquiti CVEs that may allow command execution or authentication bypass and notes that an update is available for affected devices.

    0000056
    2.2K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-77537 A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injectio… https://www.cve.org/CVERecord?id=CVE-2026-77537 ----- Traducción: CVE-2026-77537 Un … https://infoflow.cloud`

    Post summary

    The tweet announces CVE-2026-77537, describing an improper input validation flaw in UniFi Protect that could enable command injection, with just the CVE record link provided but no PoC, exploit code, or patch information.

    0000062
    102 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-77537 A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injectio… https://www.cve.org/CVERecord?id=CVE-2026-77537

    Post summary

    The entry notes a potential command‑injection issue via improper input validation in UniFi Protect, but provides no proof‑of‑concept, exploit tool, patch, or evidence of active exploitation.

    00000825
    58.0K followersView on X

Explore more

Back to dashboard