CVE-2026-77552 describes an Improper Input Validation vulnerability in the UniFi Enterprise Audio/Video Bridge product by Ubiquiti. A network-adjacent malicious actor can exploit this flaw to perform Command Injection on the affected device. The vulnerability does not require physical access, only network access, making it potentially exploitable remotely within the network perimeter. Command injection vulnerabilities of this nature can allow attackers to execute arbitrary OS commands, potentially leading to full device compromise. The advisory was published on NVD and is accompanied by a Ubiquiti community security advisory bulletin. No additional exploit details or proof-of-concept code are referenced in the article. The current risk assessment is rated High.
