Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

Ubiquiti patched 22 vulnerabilities affecting primarily its UniFi product line, including three maximum-severity (CVSS 10.0) improper-access-control flaws—CVE-2026-77537, CVE-2026-77550, CVE-2026-77554—that could allow attackers to gain device or application privileges; other disclosed issues enable authentication bypass or arbitrary command execution. The company published mitigation guidance but did not report confirmed in-the-wild exploitation of these specific flaws, although CISA has previously listed three Ubiquiti vulnerabilities as known to be exploited.