What is GHSA-grg7-48rg-2r86?

GHSA-grg7-48rg-2r86 is a security advisory published by GitHub Security Advisories with Critical severity. A malicious actor with access to the network could exploit an Improper Neutralization of CRLF...

Which CVE IDs does GHSA-grg7-48rg-2r86 cover?

GHSA-grg7-48rg-2r86 covers the following CVE IDs: CVE-2026-77550. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-grg7-48rg-2r86?

GHSA-grg7-48rg-2r86 has a CVSS v3 base score of 10.0, published by GitHub Security Advisories.

GHSA-grg7-48rg-2r86CriticalCVSS 10.0

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-77550 →

📋 Description

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77550
https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9
https://github.com/advisories/GHSA-grg7-48rg-2r86