Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-77534: UniFi OS devices let network user gain admin rights
CVE-2026-77534 · published 8 days ago
Summary
A flaw in certain UniFi OS devices lets someone who is already on your network and has only basic permissions take control of the device as an administrator. This can lead to full access to the device and the data it handles. Apply the latest firmware updates from the vendor as soon as possible to block the issue.
What to do
- Update ubiquiti inc unifi os server to version 5.1.37 or later.
- Update ubiquiti inc cloud keys to version 5.1.31 or later.
- Update ubiquiti inc network video recorders to version 5.1.31 or later.
- Update ubiquiti inc enterprise network video recorders to version 5.1.31 or later.
- Update ubiquiti inc enterprise network attached storage to version 5.1.31 or later.
- Update ubiquiti inc dream machines to version 5.1.31 or later.
- Update ubiquiti inc enterprise firewall core to version 5.1.31 or later.
- Update ubiquiti inc dream routers to version 5.1.31 or later.
- Update ubiquiti inc enterprise fortress gateway to version 5.1.31 or later.
- Update ubiquiti inc cloud gateways to version 5.1.31 or later.
- Update ubiquiti inc dream wall to version 5.1.31 or later.
- Update ubiquiti inc express 7 to version 5.1.31 or later.
- Update ubiquiti inc network attached storage to version 5.1.32 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ubiquiti inc | unifi os server | < 5.1.37 |
| ubiquiti inc | cloud keys | < 5.1.31 |
| ubiquiti inc | network video recorders | < 5.1.31 |
| ubiquiti inc | enterprise network video recorders | < 5.1.31 |
| ubiquiti inc | enterprise network attached storage | < 5.1.31 |
| ubiquiti inc | dream machines | < 5.1.31 |
| ubiquiti inc | enterprise firewall core | < 5.1.31 |
| ubiquiti inc | dream routers | < 5.1.31 |
| ubiquiti inc | enterprise fortress gateway | < 5.1.31 |
| ubiquiti inc | cloud gateways | < 5.1.31 |
| ubiquiti inc | dream wall | < 5.1.31 |
| ubiquiti inc | express 7 | < 5.1.31 |
| ubiquiti inc | network attached storage | < 5.1.32 |
Original advisory text
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such U...
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Severity
9.9
Critical
CVSS 3.1: 9.9 (MITRE)
Exploitation
EPSS <1%
Type
CWE-284Improper Access Control
Timeline
Published26 Aug 2026
Updated2 Sep 2026
First seen26 Aug 2026
Monitor software like this
Free during beta