CVE-2026-77549

Name of the Vulnerable Software and Affected Versions UniFi OS (affected versions not specified)

Description An Improper Neutralization of CRLF Sequences vulnerability exists in certain devices running UniFi OS. A malicious actor with network access could exploit this issue under specific conditions to bypass authentication to the affected devices or instances. CRLF injection occurs when an application fails to properly sanitize Carriage Return (CR) and Line Feed (LF) characters, allowing an attacker to inject new lines into a protocol stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.