


Perceptive Security
SOC/SIEM Consultancy

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the …
Published:
26 August 2026 at 00:00:00
Alert date:
26 August 2026 at 18:17:38
Source:
nvd.nist.gov
Mobile & IoT, Identity & Access, Network Infrastructure
CVE-2026-77557 is an Improper Access Control vulnerability affecting the UniFi Protect AI Key device. A malicious actor with network access can exploit this flaw to escalate privileges on the affected device. The vulnerability was disclosed via the NVD and accompanied by a Ubiquiti security advisory. Privilege escalation vulnerabilities of this nature can allow attackers to gain unauthorized administrative control over security camera infrastructure. The affected product, UniFi Protect AI Key, is part of Ubiquiti's network video surveillance ecosystem. Organizations using this device should review the vendor advisory for patching guidance. The risk is rated High given the potential for complete device compromise by a network-adjacent attacker.
Technical details
Mitigation steps:
Affected products:
UniFi Protect AI Key
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-77557
https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
