{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-77541", "assignerOrgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "state": "PUBLISHED", "assignerShortName": "Ubiquiti", "dateReserved": "2026-08-20T20:32:30.113Z", "datePublished": "2026-08-26T09:58:08.644Z", "dateUpdated": "2026-08-26T13:23:20.467Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "shortName": "Ubiquiti", "dateUpdated": "2026-08-26T09:58:08.644Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control - Generic", "type": "CWE"}]}], "affected": [{"vendor": "Ubiquiti Inc", "product": "UniFi Network Application", "versions": [{"status": "affected", "version": "0", "lessThan": "10.5.67", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application."}]}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-26T13:22:27.619583Z", "id": "CVE-2026-77541", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-26T13:23:20.467Z"}}]}}

{}

{}

{}

{"created": "2026-08-26T12:30:05.299833+00:00", "title": "Privilege Escalation via Improper Access Control in Ubiquiti UniFi Network Application", "updated": "2026-08-26T12:30:05.299842+00:00", "vendors": []}