CVE-2026-77534 describes an Improper Access Control vulnerability affecting devices running UniFi OS. A malicious actor with low privileges and network access can exploit this flaw to escalate privileges within affected UniFi OS devices or instances. The vulnerability requires only low-level access to the network, lowering the bar for exploitation. Ubiquiti has published a security advisory bulletin addressing this issue. The flaw poses a significant risk to organizations using UniFi OS-based network infrastructure. Privilege escalation vulnerabilities of this nature can allow attackers to gain administrative control over network devices. Patching and network segmentation are recommended mitigations.
