Loading story…
Ubiquiti released security updates for three maximum-severity vulnerabilities affecting UniFi Protect, UniFi OS, and UniFi Talk. CVE-2026-77537 can allow unauthenticated compromise of vulnerable UniFi Protect deployments; CVE-2026-77550 is a CRLF-injection flaw that can bypass authentication in UniFi OS; and CVE-2026-77554 is a command-injection vulnerability in UniFi Talk. The flaws are remotely exploitable through low-complexity attacks and require no user interaction.
Canada’s Centre for Cyber Security warned that multiple UniFi offerings—including UniFi OS Server, UniFi Network, UniFi Protect, UniFi Access, UniFi Talk, and specialized UniFi devices and applications—are affected at specified versions, directing administrators to Ubiquiti Security Advisory Bulletin 067 for product-specific remediation. Ubiquiti had not reported evidence of exploitation before the patches were issued, but organizations should prioritize updates, particularly because more than 100,000 UniFi OS instances have been observed exposed to the internet.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Ubiquiti issued Security Advisory Bulletin 067 and released updates for critical vulnerabilities affecting UniFi OS Server, Network, Protect, Access, Talk, and other UniFi products. The Canadian Centre for Cyber Security advised administrators to review the bulletin and apply the available updates.
CISA added three Ubiquiti vulnerabilities to its Known Exploited Vulnerabilities catalog. The reference does not identify the affected CVEs or state that they were among the vulnerabilities patched in Ubiquiti's later bulletin.
Ubiquiti's disclosure was reported to cover 21 critical vulnerabilities, although its accompanying table listed 22 CVEs, spanning UniFi Protect, OS, Network, Access, Connect, Talk, and related products. The additional flaws include network-reachable command injection, CRLF-based authentication bypass, and privilege escalation issues, with fixes provided in updated application and firmware versions.
Ubiquiti patched CVE-2026-77537 in UniFi Protect, CVE-2026-77550 in UniFi OS, and CVE-2026-77554 in UniFi Talk. The flaws allow unauthenticated compromise, authentication bypass, or command injection under low-complexity conditions without user interaction; Ubiquiti had not disclosed exploitation in the wild before patching.
Cybercriminals exploited separate UniFi OS vulnerabilities in late June, after Ubiquiti had issued patches for those flaws in late May. The reference does not identify the exploited CVEs.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
9 references tracked. Mallory keeps watching after this page renders.
ncsc.nl
Open sourceheise.de
Open sourcescworld.com
Open sourcecyberscoop.com
Open sourcecybersecuritynews.com
Open sourcecyber.gc.ca
Open sourcebleepingcomputer.com
Open sourcesecurityonline.info
Open sourcecommunity.ui.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ubiquiti released security updates for **UniFi OS** to fix five vulnerabilities affecting widely deployed products including **UniFi Cloud Gateway, UniFi Dream Machine, UNVR, NAS devices, consoles, and UniFi OS Server**. Three flaws—`CVE-2026-34908`, `CVE-2026-34909`, and `CVE-2026-34910`—were rated **CVSS 10.0** and could be exploited by remote, unauthenticated attackers to change system settings, read sensitive files through path traversal, or trigger command injection that could lead to remote code execution. Two additional issues, `CVE-2026-33000` and `CVE-2026-34911`, could also enable command injection, path traversal, privilege escalation, persistence, and data theft under certain conditions. The vulnerabilities were reported through **HackerOne**, and Ubiquiti said they can be exploited with low complexity, although it did not say whether they had been abused before patches were issued. Government and national CERT advisories, including Canada’s Cyber Centre and Germany’s dCERT, directed administrators to review Ubiquiti bulletin 064 and apply updated firmware and software versions immediately. The risk is amplified by the large number of Internet-exposed UniFi OS systems—reportedly close to **100,000**—because these appliances often sit at the network edge and can provide attackers with a path into internal environments if management interfaces are publicly reachable.
Jun 29, 2026
Ubiquiti has disclosed 25 vulnerabilities across its UniFi ecosystem in Security Advisory Bulletin 066, affecting **UniFi Connect, Talk, Access, Protect, Network Application, Protect Floodlight, and UniFi OS** on UDM, UNVR, and UNAS devices. The most severe issue, `CVE-2026-50746`, carries a **CVSS 10.0** rating and allows unauthenticated network-adjacent command injection in UniFi Connect, while several other flaws rated **9.9** can enable privilege escalation or full device compromise in UniFi Talk, UniFi Access, UniFi OS, and UniFi Protect. Ubiquiti also warned that `CVE-2026-54403` in UniFi OS can be chained with other bugs to bypass low-privilege requirements, increasing the risk of broader compromise. The disclosure aligns with broader Q2 2026 vulnerability trends showing attackers concentrating on **internet-facing access points** such as firewalls, VPNs, enterprise management panels, and authentication portals. AhnLab’s quarterly report highlighted UniFi OS among major enterprise-facing products affected during the quarter and noted that critical vulnerabilities and actively exploited flaws continued to rise, with **75 new entries** added to CISA’s Known Exploited Vulnerabilities catalog. Ubiquiti has released patched versions for all affected products and said **no interim workarounds are available**, making immediate patching and tighter protection of exposed administrative interfaces the primary defenses.
Jul 23, 2026
Ubiquiti released **Security Advisory Bulletin 064** to fix five vulnerabilities in **UniFi OS**, including three **unauthenticated remote code execution** flaws tracked as `CVE-2026-34908`, `CVE-2026-34909`, and `CVE-2026-34910`, each described by community reporting as **CVSS 10.0** issues affecting a broad range of **UDM, UCG, and UNVR** devices. The advisory also addressed `CVE-2026-33000`, a **CVSS 9.1** command injection vulnerability in **UniFi OS Server** that can let an attacker with administrative privileges and network access execute arbitrary operating system commands and potentially gain **root-level control** over managed infrastructure. The command injection bug was reported through **HackerOne** by researcher **V3rlust**, and Ubiquiti said `UniFi OS Server 5.0.8` and later contain the fix, while `5.0.6` and earlier are confirmed vulnerable. Public reporting noted that roughly **87,196 exposed UniFi Network Application hosts** were visible from the internet, raising concern that the unauthenticated RCE flaws could be chained with the command injection issue to compromise internet-facing deployments; administrators were urged to update firmware immediately, restrict management-plane exposure, and verify patch status across deployed systems.
Jul 10, 2026