Ubiquiti security advisories, August 2026

Every Ubiquiti security advisory published in August 2026, from Ubiquiti Security Advisory Bulletins (Ubiquiti CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 18
Critical: 16
High: 2
In CISA KEV: 0
CVEs: 18

Ubiquiti advisories published in August 2026

Aug 26, 2026
Critical [CVE-2026-77557] malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device
Critical9.8
Aug 26, 2026
Critical [CVE-2026-77554] malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device
Critical10.0
Aug 26, 2026
Critical [CVE-2026-77553] malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device
Critical9.9
Aug 26, 2026
Critical [CVE-2026-77552] malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device
Critical9.8
Aug 26, 2026
Critical [CVE-2026-77551] malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device
Critical9.0
Aug 26, 2026
Critical [CVE-2026-77550] malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances
Critical10.0
Aug 26, 2026
Critical [CVE-2026-77549] malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances
Critical9.0
Aug 26, 2026
Critical [CVE-2026-77548] malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device
Critical9.9
Aug 26, 2026
Critical [CVE-2026-77547] malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device
Critical9.9
Aug 26, 2026
Critical [CVE-2026-77545] malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances
Critical9.0
Aug 26, 2026
Critical [CVE-2026-77542] Ubiquiti: malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device
Critical9.1
Aug 26, 2026
Critical [CVE-2026-77541] malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application
Critical9.1
Aug 26, 2026
Critical [CVE-2026-77540] malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device
Critical9.1
Aug 26, 2026
Critical [CVE-2026-77537] malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device
Critical10.0
Aug 26, 2026
Critical [CVE-2026-77536] malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances
Critical9.9
Aug 26, 2026
Critical [CVE-2026-77535] malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device
Critical9.1
Aug 26, 2026
High [CVE-2026-77532] malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device
High8.8
Aug 26, 2026
High [CVE-2026-77538] malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application
High8.2

Get an email when Ubiquiti publishes the next one.

See Ubiquiti's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Ubiquiti

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.