CVE-2026-77555 Details
Description
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device.
A denial-of-service vulnerability has been identified in certain UniFi gateway devices. This out-of-bounds write issue can be exploited by a malicious actor with network access, potentially leading to a DoS condition on the affected device.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 22, 2026CISA-ADP
Assessed Sep 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-069-069/07e367a7-edec-4d85-a058-f97e5ce9ac9c | Ubiquiti | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | Ubiquiti |
Affected Products
| Product | Versions |
|---|---|
| Ubiquiti UniFi Security Gateway | All versions |
CPE
Remediation
| |
| Ubiquiti UniFi Dream Machine | All versions |
CPE
Remediation
| |
| Ubiquiti UniFi Dream Machine Pro | All versions |
CPE
Remediation
| |
| Ubiquiti UniFi Dream Machine SE | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | CISA-ADP |
| Sep 22, 2026 | New CVE Received | Ubiquiti |