CVE-2026-77533: Ubiquiti malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device
This Ubiquiti advisory covers CVE-2026-77533 in UniFi Protect Application.
- CVE-2026-77533
Key facts
- Vendor rating
- Critical, CVSS 9.9
- CISA KEV
- Not listed (catalogue checked )
- Affected
- UniFi Protect Application before 7.2.105
- Fixed in
- 7.2.105
- Source published
- Source revised
- Listed by VulniPulse
- Record changed
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
Text from the source record.
- UniFi Protect Application before 7.2.105
Official advisory · high-confidence parse· fetched ·verify at source
How to fix CVE-2026-77533
Upgrade to a fixed release named by Ubiquiti:
- 7.2.105
More Ubiquiti advisories
CVE-2026-77548Aug 26, 2026malicious actor with access to the network and low privileges could exploitCVE-2026-77537Aug 26, 2026malicious actor with access to the network could exploit an Improper Input ValidationCVE-2026-119251Oct 29, 2026Ubiquiti: malicious actor with local access and high privileges could exploitCVE-2026-119250Oct 29, 2026Ubiquiti: malicious actor with local access and low privileges could exploit an ExternalCVE-2026-119249Oct 29, 2026Ubiquiti: malicious actor with access to the network could exploit a BindingCVE-2026-116839Oct 27, 2026malicious actor who lures an authenticated user to a malicious page could exploit
Get an email when Ubiquiti UniFi Protect publishes the next one.
See Ubiquiti UniFi Protect's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Ubiquiti CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
