A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.

A buffer overflow vulnerability has been identified in Ubiquiti EdgeMAX EdgeSwitch devices with DHCPv6 enabled. A malicious actor with access to an adjacent network can exploit this vulnerability to achieve Remote Code Execution on the affected device. The vulnerability is tracked as CVE-2026-77532 and is documented in the NVD. Ubiquiti has published a security advisory bulletin (068) addressing this issue. The attack vector requires adjacent network access, limiting the exposure somewhat compared to internet-facing vulnerabilities. However, the potential for full remote code execution makes this a high-severity finding. Organizations running EdgeSwitch devices with DHCPv6 enabled should apply patches or mitigations as soon as they become available.