Ubiquiti Inc Enterprise Firewall Core vulnerabilities

5 CVEs affecting Ubiquiti Inc Enterprise Firewall Core, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77550, published 2026-08-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-77550, published 2026-08-26. Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days. A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi…
CVE-2026-77549, published 2026-08-26. Critical severity, CVSS 9.0. EPSS: 0.5% chance of exploitation in the next 30 days. A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass…
CVE-2026-77534, published 2026-08-26. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such…
CVE-2026-77536, published 2026-08-26. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such…
CVE-2026-77545, published 2026-08-26. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate…