VulnerabilityBleeping Computer
10.0 — CRITICAL
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks, targeting commercial building operations and Ubiquiti routers, gateways, NAS, and surveillance systems.
⚙️Technical Details
Affected Systems
UniFi Connect ApplicationUniFi Talk ApplicationUniFi Access ApplicationUbiquiti routers, gateways, NAS, and surveillance systems
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Commercial building operations using UniFi OS, including smart LED lighting systems and electric vehicle chargers
🛡️Recommended Actions
1Update the impacted UniFi Connect app to version 3.4.20 or later
2Apply security patches to all affected Ubiquiti routers, gateways, NAS, and surveillance systems
3Monitor network activity for signs of command injection attacks
📦Affected Products
UniFi OSUniFi Connect ApplicationUniFi Talk ApplicationUniFi Access Application
🔐NVD Verified DataVERIFIED
CVE-2026-50746 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-284
CVE-2026-50747 ↗CVSS 9.9 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-89
CVE-2026-50748 ↗CVSS 9.9 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-20
CVE-2026-54400 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-284
CVE-2026-54402 ↗CVSS 9.9 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-20
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.