logo

UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products

ID: 2211adc1-fca9-506c-95f5-7245880746e7

STIX ID: report--2211adc1-fca9-506c-95f5-7245880746e7

Feed Name: securityonline.info

Threat Score
80/100

Date Published: 2026-08-26

Date Updated: 2026-08-26

Author: Do Son

...
...

Ubiquiti Security Advisory Bulletin 067 discloses 22 vulnerabilities across UniFi products (21 critical, 1 high), including multiple network-accessible command-injection flaws and three CVSS 10.0 issues; administrators should apply the listed fixes (e.g., UniFi Protect 7.2.105, Network 10.5.67, UniFi OS Server 5.1.37) immediately. The advisory reports no confirmed in-the-wild exploitation or public proof-of-concept at this time.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.