Security Advisory Bulletin 067

Overview

Security Advisory Bulletin 067

Published: August 26, 2026

Version: 1.0

Revision: 1.0

Summary 1 of 22

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.

Affected Products:

UniFi Protect Application (Version 7.1.87 and earlier)

Mitigation:

Update your UniFi Protect Application to Version 7.2.105 or later.

Impact:

CVSS Severity and Metrics:

Base Score: 9.9 Critical

Vector: 

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE: CVE-2026-77533 (Abdulaziz Almadhi | Catchify Security)