CVE-2026-77545 - Vulnerability Details - OpenCVE

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9

History

Wed, 26 Aug 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 26 Aug 2026 12:15:00 +0000

Type	Values Removed	Values Added
Title		Active Debug Code Vulnerability Allows Privilege Escalation in UniFi OS Devices

Wed, 26 Aug 2026 10:15:00 +0000

Type	Values Removed	Values Added
Description		A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Weaknesses		CWE-489
References		https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9
Metrics		cvssV3_1 `{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Ubiquiti

Published: 2026-08-26T10:13:43.772Z

Updated: 2026-08-27T03:56:56.210Z

Reserved: 2026-08-20T20:32:37.793Z

Link: CVE-2026-77545

Vulnrichment

Updated: 2026-08-26T13:20:09.094Z

NVD

Status : Deferred

Published: 2026-08-26T10:16:42.407

Modified: 2026-08-28T18:49:15.340

Link: CVE-2026-77545

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-77545", "assignerOrgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "state": "PUBLISHED", "assignerShortName": "Ubiquiti", "dateReserved": "2026-08-20T20:32:37.793Z", "datePublished": "2026-08-26T10:13:43.772Z", "dateUpdated": "2026-08-27T03:56:56.210Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "shortName": "Ubiquiti", "dateUpdated": "2026-08-26T10:13:43.772Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-489", "description": "CWE-489 Active debug code", "type": "CWE"}]}], "affected": [{"vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.37", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Cloud Keys", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Network Video Recorders", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Network Video Recorders", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Network Attached Storage", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Machines", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Firewall Core", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Routers", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Fortress Gateway", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Cloud Gateways", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Wall", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Express 7", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Network Attached Storage", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.32", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances."}]}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-26T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-77545"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-27T03:56:56.210Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-77545", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-26T13:20:05.396458Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-26T13:20:09.094Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Ubiquiti Inc", "product": "UniFi OS Server", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.37", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Cloud Keys", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Network Video Recorders", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Network Video Recorders", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Network Attached Storage", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Machines", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Firewall Core", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Routers", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Enterprise Fortress Gateway", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Cloud Gateways", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Dream Wall", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Express 7", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.31", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "Network Attached Storage", "versions": [{"status": "affected", "version": "0", "lessThan": "5.1.32", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.", "supportingMedia": [{"type": "text/html", "value": "A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-489", "description": "CWE-489 Active debug code"}]}], "providerMetadata": {"orgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "shortName": "Ubiquiti", "dateUpdated": "2026-08-26T10:13:43.772Z"}}}, "cveMetadata": {"cveId": "CVE-2026-77545", "state": "PUBLISHED", "dateUpdated": "2026-08-26T13:20:12.910Z", "dateReserved": "2026-08-20T20:32:37.793Z", "assignerOrgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "datePublished": "2026-08-26T10:13:43.772Z", "assignerShortName": "Ubiquiti"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "UniFi OS Server", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.37", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Cloud Keys", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Network Video Recorders", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Enterprise Network Video Recorders", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Enterprise Network Attached Storage", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Dream Machines", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Enterprise Firewall Core", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Dream Routers", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Enterprise Fortress Gateway", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Cloud Gateways", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Dream Wall", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Express 7", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.31", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Network Attached Storage", "vendor": "Ubiquiti Inc", "versions": [{"lessThan": "5.1.32", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "fe490ce8-0395-4072-90d8-2707e1bdf984"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances."}], "id": "CVE-2026-77545", "lastModified": "2026-08-28T18:49:15.340", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "fe490ce8-0395-4072-90d8-2707e1bdf984", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-77545", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-26T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-08-26T10:16:42.407", "references": [{"source": "fe490ce8-0395-4072-90d8-2707e1bdf984", "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"}], "sourceIdentifier": "fe490ce8-0395-4072-90d8-2707e1bdf984", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-489"}], "source": "fe490ce8-0395-4072-90d8-2707e1bdf984", "type": "Secondary"}]}