Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution. The list of vulnerabilities is as follows - CVE-2026-50746 CVSS score:...

CVE-2026-50748

creationtimestamp| type| source ---|---|--- 2026-07-03 07:06:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppybm6qum2k 2026-07-03 21:35:42+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpriuhp4u22r 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-50748

CVE-2026-50748 describes an Improp er Input Validation vulnerability in the UniFi Access Application that enables a Command Injection on the host when an attacker with network access and low privileges can exploit it. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating...

CVE-2026-50748

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...