Ubiquiti Inc UniFi Access Application

• CVE-2026-77553 Critical 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device. 0.5%
• CVE-2026-77547 Critical 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host de 1.4%
• CVE-2026-77546 Critical 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host de 1.4%
• CVE-2026-77543 Critical 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host de 1.4%
• CVE-2026-55117 High 8.6 A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device. 0.6%
• CVE-2026-54400 Critical 9.1 A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device. 0.5%
• CVE-2026-50748 Critical 9.9 A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host de 1.6%
• CVE-2025-52665 Critical 10.0 A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. 41.1%