Summary
CVE-2026-77538 is an Improper Access Control vulnerability (CWE-284) in Ubiquiti’s UniFi Connect Application that allows a malicious actor with access to the network to escalate privileges within the application. The flaw affects all versions prior to 3.24.22 and carries a CVSS v3.1 base score of 8.2 (High). Ubiquiti disclosed the issue in Security Advisory Bulletin 067, released alongside the fixed release.
Technical details
- Root cause: The UniFi Connect Application fails to properly enforce access control checks, allowing a network-accessible actor to perform actions or reach functionality that should require higher privileges.
- Trigger conditions: No authentication (PR:N) or user interaction (UI:N) is required to exploit the flaw — the attacker only needs network-level access ("access to the network") to the UniFi Connect Application.
- Attack vector: Network (AV:N), with low attack complexity (AC:L), meaning the flaw can be exploited remotely by any actor able to reach the application over the network.
- Impact: Successful exploitation results in privilege escalation, with the CVSS vector reflecting no confidentiality impact, high integrity impact, and low availability impact — consistent with an attacker gaining elevated control/modification rights over the application without directly exfiltrating data.
Affected software
- Ubiquiti UniFi Connect Application — all versions prior to 3.24.22
Severity
- CVSS v3.1 Base Score: 8.2 (High)
- Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Mitigation and recommended actions
- Immediate: Upgrade UniFi Connect Application to version 3.24.22 or later, as published in Ubiquiti Security Advisory Bulletin 067.
- If immediate patching is not possible: Restrict network access to the UniFi Connect Application to trusted management networks only (e.g., via firewall rules, network segmentation, or VLAN isolation) to reduce exposure to network-based actors until the patch can be applied.
- Review UniFi Connect Application logs for signs of unauthorized privilege changes or unexpected administrative actions performed prior to patching.
- Ensure the underlying UniFi OS/console hosting the UniFi Connect Application is also kept current, as Ubiquiti frequently bundles related access-control fixes across its UniFi Connect product line.

