CVE-2026-77553 is an Improper Access Control vulnerability in the UniFi Access Application. A malicious actor with low privileges and network access can exploit this flaw to escalate privileges on the host device. The vulnerability was disclosed via the NVD and Ubiquiti's security advisory bulletin. The attack vector requires network access with low privilege level, making it accessible to insider threats or attackers who have gained initial access. Privilege escalation vulnerabilities of this nature can lead to full system compromise. Ubiquiti has published a security advisory (Bulletin-067) addressing this issue. Users of UniFi Access Application are advised to review the advisory and apply any available patches promptly.
