A critical vulnerability (CVE-2026-77554) has been identified in the UniFi Talk Application involving Improper Input Validation. A network-accessible malicious actor can exploit this flaw to perform Command Injection on the host device. The vulnerability requires network access but no further authentication details are specified. Ubiquiti has published a security advisory bulletin regarding this issue. The impact is rated as high, given the potential for arbitrary command execution on affected hosts. Organizations using UniFi Talk should review the advisory and apply patches or mitigations as soon as available. This type of command injection vulnerability can lead to full system compromise if successfully exploited.
