CVE-2026-77549: A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in…

PriorityP262critical9CVSS 3.1

AVNACHPRNUINSCCHIHAH

EPSS

0.51%

41.6th percentile

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
ubiquiti_inc	cloud_gateways	< 5.1.31	5.1.31
ubiquiti_inc	cloud_keys	< 5.1.31	5.1.31
ubiquiti_inc	dream_machines	< 5.1.31	5.1.31
ubiquiti_inc	dream_routers	< 5.1.31	5.1.31
ubiquiti_inc	dream_wall	< 5.1.31	5.1.31
ubiquiti_inc	enterprise_firewall_core	< 5.1.31	5.1.31
ubiquiti_inc	enterprise_fortress_gateway	< 5.1.31	5.1.31
ubiquiti_inc	enterprise_network_attached_storage	< 5.1.31	5.1.31
ubiquiti_inc	enterprise_network_video_recorders	< 5.1.31	5.1.31
ubiquiti_inc	express	< 4.0.17	4.0.17
ubiquiti_inc	express_7	< 5.1.31	5.1.31
ubiquiti_inc	network_attached_storage	< 5.1.32	5.1.32
ubiquiti_inc	network_video_recorders	< 5.1.31	5.1.31
ubiquiti_inc	unifi_os_server	< 5.1.37	5.1.37

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.