{"id":"CVE-2026-77551","state":"PUBLISHED","title":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate","description":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device.","publishedAt":"2026-08-26T10:37:19.573Z","updatedAt":"2026-08-26T12:49:50.559Z","severity":{"score":9,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","source":"Ubiquiti"},"assigner":"Ubiquiti","products":["Ubiquiti Inc UniFi Connect Display Cast Pro"],"affected":[{"vendor":"Ubiquiti Inc","product":"UniFi Connect Display Cast Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.0.111","versionType":"semver"}]}],"references":["https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/77xxx/CVE-2026-77551.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-77551","state":"PUBLISHED","datePublished":"2026-08-26T10:37:19.573Z","dateUpdated":"2026-08-26T12:49:50.559Z","assignerShortName":"Ubiquiti","assignerOrgId":"fe490ce8-0395-4072-90d8-2707e1bdf984","dateReserved":"2026-08-20T20:32:37.794Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device."}],"affected":[{"vendor":"Ubiquiti Inc","product":"UniFi Connect Display Cast Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.0.111","versionType":"semver"}]}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","lang":"en","description":"CWE-284 Improper Access Control - Generic","type":"CWE"}]}],"providerMetadata":{"shortName":"Ubiquiti","orgId":"fe490ce8-0395-4072-90d8-2707e1bdf984","dateUpdated":"2026-08-26T10:37:19.573Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-08-26T12:49:40.158407Z","id":"CVE-2026-77551","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-26T12:49:50.559Z"}}]}}}