Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-77545 EUVD-2026-66390GHSA-4c82-32w7-vxc8

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability …

Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by Ubiquiti

Vendor: Ubiquiti Product: Cloud Gateways Product: Cloud Keys Product: Dream Machines Product: Dream Routers Product: Dream Wall Product: Enterprise Firewall Core Product: Enterprise Fortress Gateway Product: Enterprise Network Attached Storage Product: Enterprise Network Video Recorders Product: Express 7 Product: Network Attached Storage Product: Network Video Recorders Product: UniFi OS Server Category: Network devices

Description

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi OS Server < 5.1.37 5.1.37
Ubiquiti Cloud Keys < 5.1.31 5.1.31
Ubiquiti Network Video Recorders < 5.1.31 5.1.31
Ubiquiti Enterprise Network Video Recorders < 5.1.31 5.1.31
Ubiquiti Enterprise Network Attached Storage < 5.1.31 5.1.31
Ubiquiti Dream Machines < 5.1.31 5.1.31
Ubiquiti Enterprise Firewall Core < 5.1.31 5.1.31
Ubiquiti Dream Routers < 5.1.31 5.1.31
Ubiquiti Enterprise Fortress Gateway < 5.1.31 5.1.31
Ubiquiti Cloud Gateways < 5.1.31 5.1.31
Ubiquiti Dream Wall < 5.1.31 5.1.31
Ubiquiti Express 7 < 5.1.31 5.1.31
Ubiquiti Network Attached Storage < 5.1.32 5.1.32

Advisories 2

References