CVE-2026-77549Patch

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9

Weakness type (CWE)

CWE-93

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-26); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://cybersecurity-news.de/cve-2026-77549-unifi-os-authentifizierung-umgehbar

Classification over time

Date	Total	Labels

2026-08-26	1	Patch1
2026-08-27	1	Disclosure1

Full discourse2 posts

Rıdvan Yağlı@ridvanyagli47d
Patch
🔴 Ubiquiti, UniFi ürün ailesinde 21 kritik güvenlik açığını kapattı. CVE-2026-77533, CVE-2026-77537 ve benzeri açıklar; uygun girdilerin doğrulanmaması nedeniyle komut enjeksiyonuna, CVE-2026-77534/77536 gibi açıklar yetki yükseltmeye, CVE-2026-77549 ve CVE-2026-77550 ise kimlik doğrulama atlatmaya yol açabiliyor. Açıkların CVSS skorları 8.2 ile 10.0 arasında değişirken, bazı senaryolarda ağ erişimi olan düşük yetkili bir saldırganın UniFi cihazında yönetici seviyesinde kontrol elde etmesi mümkün. Etkilenen ürünler arasında UniFi OS, Protect, Network, Access, Talk ve Connect bulunuyor. Kullanıcıların cihaz ve uygulamalarını güncellemesi öneriliyor.
Post summary
Ubiquiti announced updates that patch 21 critical vulnerabilities in its UniFi product line, providing technical details and urging users to apply the fixes.
00052623
2.4K followersView on X
Cybersecurity News DE@cybsecuritynews46d
Disclosure
#schwachstellen CVE-2026-77549 in UniFi OS: Authentifizierung unter bestimmten Bedingungen umgehbar #authenticationbypass #crlf #cve202677549 #unifios https://cybersecurity-news.de/cve-2026-77549-unifi-os-authentifizierung-umgehbar
Post summary
The tweet announces the discovery of CVE‑2026‑77549, an authentication bypass in UniFi OS, but offers no details on PoC, exploitation, patches, or active usage.
0000018
10 followersView on X

Explore more

Back to dashboard