Ubiquiti patched 22 UniFi flaws. Three hit CVSS 10.0, including command injection CVE-2026-77537. Update UniFi Protect, OS, and Talk now.
Ubiquiti
Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now.
Critical UniFi OS vulnerabilities boast a 9.9 CVSS score. Patch these Ubiquiti security flaws to prevent command injection and secure your network today.
Ubiquiti patches three critical CVSS 10.0 vulnerabilities in UniFi OS affecting gateways, storage, and NVRs. Update your firmware immediately!
Ubiquiti fixes critical 9.8 CVSS RCE flaws in UniFi Play PowerAmp and Audio Port. Don't let attackers control your sound—update your firmware immediately.
Ubiquiti warns of a critical 10.0 CVSS Path Traversal flaw (CVE-2026-22557) in UniFi Network Applications allowing total system takeover. Patch immediately.
Ubiquiti issued an urgent patch for a Critical Auth Bypass flaw in UniFi Access. Attackers with network access can fully take over door management systems.
Ubiquiti has issued an advisory for a critical flaw (CVE-2025-24285, CVSS 9.8) in its UniFi Connect EV Stations, allowing remote command injection and unauthenticated RCE.
Ubiquiti warns of CVE-2025-27212, a critical (CVSS 9.8) command injection vulnerability in UniFi Access devices, enabling unauthenticated RCE on the management network.
Two high-severity Ubiquiti flaws allow privilege escalation via XSS in UCRM and authenticated SQL injection in UISP. Update immediately!
Ubiquiti warns of critical RCE flaw in UniFi Protect Cameras (CVE-2025-23123); update firmware and app to prevent potential network compromise.
Stay informed about CVE-2025-23116: a critical vulnerability in UniFi Protect that could compromise user device security.
Find out the latest vulnerability in Ubiquiti devices. Over 20,000 devices are at risk, with exposed UDP ports and lack of authentication.