CVE-2026-77550Authentication bypass in UniFi OS via CRLF sequences
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
View on NVDAnalysis
Un atacante con acceso a la red puede explotar una vulnerabilidad de secuencias CRLF para evadir por completo la autenticación en dispositivos e instancias con UniFi OS. Esta falla permite obtener acceso administrativo al sistema sin necesidad de credenciales válidas. Es fundamental actualizar cualquier consola o controlador de red afectado para evitar el compromiso total de la infraestructura.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCWE-93EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.