CVE-2026-77550criticalCWE-93

CVE-2026-77550: falha crítica em Ubiquiti Inc Cloud Gateways

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Express+ Monitorar UniFi OS Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.8%
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Ubiquiti Inc · Cloud GatewaysUbiquiti Inc · Cloud KeysUbiquiti Inc · Dream MachinesUbiquiti Inc · Dream RoutersUbiquiti Inc · Dream WallUbiquiti Inc · Enterprise Firewall CoreUbiquiti Inc · Enterprise Fortress GatewayUbiquiti Inc · Enterprise Network Attached StorageUbiquiti Inc · Enterprise Network Video RecordersUbiquiti Inc · ExpressUbiquiti Inc · Express 7Ubiquiti Inc · Network Attached StorageUbiquiti Inc · Network Video RecordersUbiquiti Inc · UniFi OS Server
CVEs relacionadas — Ubiquiti Inc Cloud Gateways

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54402CRITICALCVE-2026-54402EPSS 1.8%CVE-2026-54403HIGHCVE-2026-54403EPSS 0.8%CVE-2026-77558HIGHCVE-2026-77558EPSS 0.5%CVE-2026-77556HIGHCVE-2026-77556EPSS 0.5%CVE-2026-77544HIGHCVE-2026-77544EPSS 0.5%CVE-2026-77549CRITICALCVE-2026-77549EPSS 0.5%