CVE-2026-77537: Ubiquiti Inc UniFi Protect Application

Critical severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Affected products

• Ubiquiti Inc UniFi Protect Application: before 7.2.105 (fixed in 7.2.105)

Published 2026-08-26. Last modified 2026-08-28.