Ubiquiti released fixes for seven critical security flaws in UniFi OS and related applications that could let attackers on the network take over affected devices and services. The most severe issue, CVE-2026-50746, is a command-injection vulnerability in UniFi Connect Application 3.4.16 and earlier; Ubiquiti says users should update to 3.4.20 or later. Additional critical CVEs affect UniFi Talk, UniFi Access, UniFi Protect, UniFi OS Server, and various routers, gateways, NAS, and surveillance products, with six described as low-complexity and requiring no user interaction.
Why it matters: Organizations using UniFi gear, especially internet-exposed deployments, may be at risk of device compromise and follow-on abuse if they do not patch quickly. Admins should identify affected UniFi OS and application versions and update immediately.
info@thehackernews.com (The Hacker News)
2026.07.08
96% relevant
This article appears to be another report on the same Ubiquiti July 2026 UniFi security release, adding that the affected product set spans UniFi Connect, Talk, Access, Protect, and UniFi OS rather than only framing it around UniFi OS and one flagship CVE.
Sergiu Gatlan
2026.07.08
100% relevant
This article establishes a distinct new patch-and-vulnerability event centered on newly disclosed July 2026 UniFi OS CVEs, not the earlier May/June UniFi OS flaws already tracked.
← Back to all stories