What is GHSA-g4h7-m732-3278?

GHSA-g4h7-m732-3278 is a security advisory published by GitHub Security Advisories with Critical severity. A malicious actor with access to the network and under certain conditions could exploit an...

Which CVE IDs does GHSA-g4h7-m732-3278 cover?

GHSA-g4h7-m732-3278 covers the following CVE IDs: CVE-2026-77549. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g4h7-m732-3278?

GHSA-g4h7-m732-3278 has a CVSS v3 base score of 9.0, published by GitHub Security Advisories.

GHSA-g4h7-m732-3278CriticalCVSS 9.0

A malicious actor with access to the network and under certain conditions could exploit an...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-77549 →

📋 Description

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77549
https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9
https://github.com/advisories/GHSA-g4h7-m732-3278