A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

A vulnerability identified as CVE-2026-77533 affects the UniFi Protect Application, allowing a malicious actor with low privileges and network access to exploit an Improper Input Validation flaw. This exploitation leads to Command Injection on the host device. The attack requires only low privileges, making it accessible to a broader range of potential attackers. The vulnerability poses a significant risk to environments running the UniFi Protect Application. Ubiquiti has published a security advisory bulletin addressing this issue. Users are advised to apply patches or mitigations as outlined in the official advisory. The criticality is rated High due to the potential for remote command execution.