CVE-2026-77543 is a high-severity vulnerability in the UniFi Access Application by Ubiquiti. The flaw stems from Improper Input Validation, allowing a malicious actor with low privileges and network access to perform Command Injection on the host device. This type of vulnerability can lead to unauthorized command execution, potentially compromising the entire host system. The attack requires only low privilege access, significantly lowering the barrier for exploitation. UniFi Access is commonly used in enterprise and commercial physical access control systems, making this vulnerability particularly impactful. Ubiquiti has published a security advisory bulletin addressing the issue. Organizations using UniFi Access should apply patches or mitigations immediately given the severity and ease of exploitation.
