A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

CVE-2026-77546 is a high-severity vulnerability affecting the UniFi Access Application. The flaw stems from Improper Input Validation, allowing a malicious actor with low privileges and network access to perform Command Injection on the host device. This type of vulnerability can lead to full system compromise, unauthorized command execution, and potential lateral movement within the network. The vulnerability was published via the NVD and accompanied by a Ubiquiti security advisory. Given the low privilege requirement and network-based exploitation vector, the attack surface is significant. Organizations using UniFi Access should apply patches or mitigations immediately. The advisory was issued through Ubiquiti's community security bulletin channel.