CVE-2026-77548: Ubiquiti Inc UniFi Protect Application

Critical severity, CVSS 9.9. EPSS: 1.4% chance of exploitation in the next 30 days.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Affected products

• Ubiquiti Inc UniFi Protect Application: before 7.2.105 (fixed in 7.2.105)

Published 2026-08-26. Last modified 2026-08-28.