CVE-2026-77546: Ubiquiti Inc UniFi Access Application

Critical severity, CVSS 9.9. EPSS: 1.4% chance of exploitation in the next 30 days.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

Affected products

• Ubiquiti Inc UniFi Access Application: before 4.3.5 (fixed in 4.3.5)

Published 2026-08-26. Last modified 2026-08-28.