Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

UniFi Access Application may let low‑privilege users run commands

CVE-2026-77543 · published 2 months ago
Summary

The UniFi Access Application does not properly check some input, so someone on the same network with only basic rights could cause the system to run commands it shouldn't. This could let an attacker take control of the device or disrupt its operation. Update the software to the latest version or apply the vendor’s recommended patch as soon as possible.

What to do
  • Update ubiquiti inc unifi access application to version 4.3.5 or later.
Affected software
VendorProductAffected versions
ubiquiti inc unifi access application < 4.3.5
Original advisory text
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host...
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published26 Aug 2026
Updated4 Nov 2026
First seen26 Aug 2026
Sources
CVE-2026-77543 · NVD
CVE-2026-77543 · MITRE
Track software like this
Free during beta