{"id":"CVE-2026-77532","title":"A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.","summary":"A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"published":"2026-08-26","updated":"2026-10-14","sourceUpdated":"2026-10-14T02:17:00.317","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77532","references":[{"url":"https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-068-068/b95ea5e8-1a80-4ffc-ad42-625eae300cc9","label":"fe490ce8-0395-4072-90d8-2707e1bdf984"}],"tags":["nvd","cve.org"],"epss":0.00271,"epssPercentile":0.19191,"ingestedAt":"2026-10-14T03:11:15.427Z","vendor":"Ubiquiti Inc","product":"EdgeMAX EdgeSwitch","affected":["edgemax_edgeswitch < 1.12.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-08-26T12:31:49.192604Z"},"slug":"CVE-2026-77532","body":"## Overview\n\nA malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}