CVE-2026-77557
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
An attacker with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to escalate privileges on the device.
Risk Assessment
Privilege escalation could allow the attacker full control over the device, potentially leading to data integrity and confidentiality breaches.
Recommendation
It is recommended to apply vendor patches immediately and restrict network access for unauthorized users.
Other vulnerabilities in UniFi Protect AI Key
See all- CVE-2026-110459High
A malicious actor with network access could exploit an Improper Access Control vulnerability in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device.
- CVE-2026-110458Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to create or truncate files on the device under certain conditions.
- CVE-2026-110457Low
A Path Traversal vulnerability in UniFi Protect AI Key allows a network-accessible attacker to obtain information about files on the device under certain conditions.
- CVE-2026-110456Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access, under certain conditions, to reach internal resources through the device.
- CVE-2026-110455High
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device.
- CVE-2026-110454Medium
An Improper Access Control vulnerability in UniFi Protect AI Key allows a malicious actor with network access to reach internal resources through the device.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS