Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-26 | 4 | Patch4 |
| 2026-08-27 | 3 | Disclosure1Exploit2 |
| 2026-08-28 | 2 | Disclosure2 |
| 2026-08-31 | 1 | Disclosure1 |
🚨 New Rapid Response: CVE-2026-77550 is a CVSS 10.0 authentication bypass affecting UniFi OS. Censys sees ~102,000 UniFi OS management interfaces exposed to the Internet. Patches are available. https://bit.ly/3UrrdAz https://t.co/bjCGA1GSXw
Post summary
A new high‑severity authentication bypass (CVE‑2026‑77550) affecting UniFi OS is disclosed, with over 100,000 exposed management interfaces; patches are immediately available.
First Ubiquiti CVE and it's a 10.0 (CVE-2026-77550)! https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9#:~:text=Summary%2017 Stay tuned for more :) #bugbounty
Post summary
The tweet announces Ubiquiti’s new CVE-2026-77550 with a CVSS score of 10.0 but offers no PoC, exploit, or patch details, serving as a brief disclosure.
🔴 Ubiquiti, UniFi ürün ailesinde 21 kritik güvenlik açığını kapattı. CVE-2026-77533, CVE-2026-77537 ve benzeri açıklar; uygun girdilerin doğrulanmaması nedeniyle komut enjeksiyonuna, CVE-2026-77534/77536 gibi açıklar yetki yükseltmeye, CVE-2026-77549 ve CVE-2026-77550 ise kimlik doğrulama atlatmaya yol açabiliyor. Açıkların CVSS skorları 8.2 ile 10.0 arasında değişirken, bazı senaryolarda ağ erişimi olan düşük yetkili bir saldırganın UniFi cihazında yönetici seviyesinde kontrol elde etmesi mümkün. Etkilenen ürünler arasında UniFi OS, Protect, Network, Access, Talk ve Connect bulunuyor. Kullanıcıların cihaz ve uygulamalarını güncellemesi öneriliyor.
Post summary
Ubiquiti announced that it has patched 21 critical vulnerabilities in its UniFi product family—including command‑injection, privilege‑escalation, and authentication‑bypass flaws—and urges users to update to the new firmware to mitigate the risks.
UbiquithがUniFiの重大(Critical)な脆弱性21件を修正。うち3件(CVE-2026-77537, CVE-2026-77550, CVE-2026-77554)がCVSSスコア10。悪用有無は開示なし。 https://www.bleepingcomputer.com/news/security/ubiquiti-patches-three-max-severity-security-vulnerabilities/
Post summary
Ubiquiti has issued patches for 21 critical flaws, including three with CVSS 10 scores, but the text offers no evidence of exploitation or PoC availability.
CVE-2026-77550 Ubiquiti UniFi OS CRLF injection could allow unauthenticated attackers with network access to bypass authentication and reach UniFi OS administration Full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-08-26/TIER_2_CVE-2026-77550.md #CyberSecurity #NetworkSecurity #VulnerabilityManagement
Post summary
The text announces CVE‑2026‑77550, noting a CRLF injection that lets unauthenticated attackers bypass authentication to access UniFi OS administration, without providing PoC, exploit code, or patch details.
Ubiquiti patched three max-severity flaws exploitable remotely without privileges: CVE-2026-77537 (UniFi Protect), CVE-2026-77550 (UniFi OS), CVE-2026-77554 (UniFi Talk). Fixed in Protect 7.2.105, Talk 5.3.2, UniFi OS Server 5.1.21. Source: BleepingComputer
[CVE] CVE-2026-77550 [HIGH PRIORITY] 🔗 https://exploitgrid.net/cve/CVE-2026-77550
Post summary
A high-priority CVE-2026-77550 is highlighted with a link to ExploitGrid, indicating availability of a PoC or exploit code, but no additional details on exploitation or mitigation are provided.
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-60004 - EXPLOIT CVE-2026-65956 CVE-2026-77537 CVE-2026-77550 CVE-2026-77554 ..🧵👇
Post summary
The digest simply lists several CVEs, marking CVE-2026-60004 as an exploitable vulnerability, but provides no further technical or mitigation details.
Three critical vulnerabilities in Ubiquiti UniFi products allow remote command execution without privileges, tracked as CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554. https://t.co/bfIqwtPWtb
Post summary
The text announces three critical remote command execution vulnerabilities in Ubiquiti UniFi products, but it does not provide PoC, exploit, or mitigation details.
Security Bulletin: Multiple Critical Vulnerabilities affecting Ubiquiti products - Multiple critical Ubiquiti vulnerabilities (CVE-2026-77537, CVE-2026-77550, CVE-2026-77554) may allow command execution or authentication bypass. Update affected... https://hubs.li/Q04vrHqQ0
Post summary
A security bulletin discloses three critical Ubiquiti CVEs that allow command execution or authentication bypass, and it notes that an update/patch is available for affected products.
🛜 Ubiquiti UniFi OS hit with CVSS 10 CRLF injection. CVE-2026-77550 lets attackers with network access bypass authentication, no privileges or user interaction needed. Patch now. #cybersecurity #ciso #ubiquiti #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-77550?utm_campaign=x https://t.co/Lmngn28fkc
Post summary
The tweet announces a high‑severity CRLF injection vulnerability in Ubiquiti UniFi OS, confirms the existence of a patch, and urges users to apply it immediately.