Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-77536: UniFi OS devices let low‑level users gain admin rights
CVE-2026-77536 · published 8 days ago
Summary
Some UniFi OS devices do not properly check who can do what, so a person who only has basic network access could trick the system into giving themselves higher privileges. This could let them control the device or view sensitive data. Apply the latest firmware update from the vendor as soon as possible to fix the issue.
What to do
- Update ubiquiti inc cloud gateways to version 5.1.31 or later.
- Update ubiquiti inc unifi os server to version 5.1.37 or later.
- Update ubiquiti inc cloud keys to version 5.1.31 or later.
- Update ubiquiti inc network video recorders to version 5.1.31 or later.
- Update ubiquiti inc enterprise network video recorders to version 5.1.31 or later.
- Update ubiquiti inc enterprise network attached storage to version 5.1.31 or later.
- Update ubiquiti inc dream machines to version 5.1.31 or later.
- Update ubiquiti inc enterprise firewall core to version 5.1.31 or later.
- Update ubiquiti inc dream routers to version 5.1.31 or later.
- Update ubiquiti inc enterprise fortress gateway to version 5.1.31 or later.
- Update ubiquiti inc dream wall to version 5.1.31 or later.
- Update ubiquiti inc express 7 to version 5.1.31 or later.
- Update ubiquiti inc network attached storage to version 5.1.32 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ubiquiti inc | cloud gateways | < 5.1.31 |
| ubiquiti inc | unifi os server | < 5.1.37 |
| ubiquiti inc | cloud keys | < 5.1.31 |
| ubiquiti inc | network video recorders | < 5.1.31 |
| ubiquiti inc | enterprise network video recorders | < 5.1.31 |
| ubiquiti inc | enterprise network attached storage | < 5.1.31 |
| ubiquiti inc | dream machines | < 5.1.31 |
| ubiquiti inc | enterprise firewall core | < 5.1.31 |
| ubiquiti inc | dream routers | < 5.1.31 |
| ubiquiti inc | enterprise fortress gateway | < 5.1.31 |
| ubiquiti inc | dream wall | < 5.1.31 |
| ubiquiti inc | express 7 | < 5.1.31 |
| ubiquiti inc | network attached storage | < 5.1.32 |
Original advisory text
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such U...
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Severity
9.9
Critical
CVSS 3.1: 9.9 (MITRE)
Exploitation
EPSS <1%
Type
CWE-284Improper Access Control
Timeline
Published26 Aug 2026
Updated28 Aug 2026
First seen26 Aug 2026
Monitor software like this
Free during beta