CVE-2026-77537 is a high-severity vulnerability affecting the UniFi Protect Application developed by Ubiquiti. The flaw stems from improper input validation, which allows a malicious actor with network access to perform command injection on the host device. Successful exploitation could lead to arbitrary command execution on the underlying system. The vulnerability requires network access but does not appear to need authentication details specified beyond that access. Ubiquiti has published a security advisory bulletin addressing this issue. The affected product is the UniFi Protect Application, commonly used for managing Ubiquiti security cameras and surveillance systems. Organizations running UniFi Protect should apply patches or mitigations as outlined in the vendor advisory promptly.
