UniFi Protect Application improper input validation — unauthenticated RCE
A CVSS 10.0 improper input validation flaw in Ubiquiti's UniFi Protect Application lets unauthenticated remote attackers execute arbitrary code with no user interaction. Fixed in UniFi Protect 7.2.105.
- Vendor
- Ubiquiti
- Product
- UniFi Protect Application (versions before 7.2.105)
- CVSS
- 10.0
- EPSS (exploit probability)
- 1.6%
- Status
- patched
- Published
Is CVE-2026-77537 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-77537 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-10-21 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 1.6% (scored October 14, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-21. Full cross-catalog view: /kev-comparison
CVE-2026-77537 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
CVE-2026-77537 is a maximum-severity (CVSS 10.0) improper input validation vulnerability in Ubiquiti’s UniFi Protect Application, the software platform managing Ubiquiti’s IP camera and NVR ecosystem. An unauthenticated remote attacker can exploit the flaw in low-complexity attacks requiring no user interaction.
Affected: UniFi Protect Application before 7.2.105
Fixed: UniFi Protect Application 7.2.105 or later
No known active exploitation at time of disclosure.
Apply the update immediately via the UniFi OS console or by updating through the Ubiquiti application management interface.
Other Ubiquiti CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-77554 UniFi Talk command injection — unauthenticated remote code executionwrite-up | [ CRITICAL ] | 10.0 | 1.6% | — |
| CVE-2026-77550 UniFi OS CRLF injection — authentication bypasswrite-up | [ CRITICAL ] | 10.0 | 0.8% | — |
| CVE-2026-54400 Ubiquiti UniFi Access improper access control (Bulletin 066)write-up | [ CRITICAL ] | 9.1 | 0.5% | — |
| CVE-2026-50748 Ubiquiti UniFi critical flaw (Bulletin 066)write-up | [ CRITICAL ] | 9.9 | 1.6% | — |
| CVE-2026-50747 Ubiquiti UniFi critical flaw (Bulletin 066)write-up | [ CRITICAL ] | 9.9 | 0.5% | — |
| CVE-2026-50746 Ubiquiti UniFi Connect command injection (Bulletin 066)write-up | [ CRITICAL ] | 10.0 | 1.7% | — |
| CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability | [ CRITICAL ] | 10.0 | 45.8% | |
| CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability | [ CRITICAL ] | 10.0 | 1.8% |
