CVE-2026-77536 is an Improper Access Control vulnerability affecting devices running UniFi OS. A malicious actor with low privileges and network access can exploit this flaw to escalate privileges on affected UniFi OS devices or instances. The vulnerability poses a significant risk as it requires only low-level access to exploit, making it accessible to a broad range of potential attackers. Ubiquiti has published a security advisory bulletin detailing the issue. The vulnerability is classified as high severity. No additional technical details or proof-of-concept code are publicly referenced in this article. Users of UniFi OS devices are advised to review the security bulletin and apply any available mitigations or patches promptly.
