CVE-2026-77544: A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of…

PriorityP341high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ubiquiti_inc	cloud_gateways	< 5.1.31	5.1.31
ubiquiti_inc	dream_machines	< 5.1.31	5.1.31
ubiquiti_inc	dream_routers	< 5.1.31	5.1.31
ubiquiti_inc	dream_wall	< 5.1.31	5.1.31
ubiquiti_inc	enterprise_firewalls	< 5.1.31	5.1.31
ubiquiti_inc	express	< 4.0.21	4.0.21
ubiquiti_inc	express_7	< 5.1.31	5.1.31
ubiquiti_inc	unifi_gateways	< 5.1.26	5.1.26

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.