UniFi

UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products UniFi command injection vulnerabilities across Ubiquiti products, CVE-2026-77537 CVSS 10.0 critical flaw in UniFi Protect Application

UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products

Do Son August 26, 2026

TL;DR Ubiquiti published Security Advisory Bulletin 067 on August 26, 2026. It patches 22 vulnerabilities across the...

Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities UniFi security advisory 066 covering 25 vulnerabilities including command injection

UniFi security advisory 066 covering 25 vulnerabilities including command injection

Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities

Do Son July 7, 2026

Ubiquiti released a UniFi security advisory, Bulletin 066. It fixes 25 flaws in UniFi products. One bug...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026

CVE-2026-69843CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-62874CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-69399CVSS 10.0
No description available
📅 Updated: Sep 17, 2026
CVE-2026-54734CVSS 10.0
Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied...
📅 Updated: Sep 17, 2026
CVE-2026-54767CVSS 9.1
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletar_socios.php exposes an unauthenticated GET endpoint whose...
📅 Updated: Sep 17, 2026
CVE-2026-54670CVSS 9.1
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in web/html/contribuicao/controller/control.php accepts...
📅 Updated: Sep 17, 2026
CVE-2026-75837CVSS 9.1
## Summary The core Flex group blueprint `system/blueprints/user/group.yaml` (access field, lines 48-55) omits the `security@: admin.super` field guard...
📅 Updated: Sep 17, 2026
CVE-2026-54626CVSS 9.8
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles....
📅 Updated: Sep 17, 2026

Critical Alert 3 Active Exploits Detected Today

UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products

Ubiquiti UniFi Security Advisory 066 Fixes 25 Vulnerabilities