Loading story…
Ubiquiti released firmware updates for multiple high-severity vulnerabilities in UniFi firewalls and gateway products. Network-accessible attackers could exploit out-of-bounds write, out-of-bounds read, and uncontrolled-recursion flaws to trigger denial-of-service conditions; each issue carries a CVSS score of 7.5. Affected families include Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express, Express 7, and UniFi Gateways.
Organizations should promptly update affected appliances to the vendor-provided fixed releases. Products running versions earlier than 5.1.31 for Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, and Express 7, earlier than 5.1.26 for UniFi Gateways, and earlier than 4.0.21 for Express are affected; administrators should review Ubiquiti's advisory and apply the available firmware updates.
Map this exposure pattern across your cloud, code, and identities.
4 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published Security Advisory Bulletin 069 (AV26-954), identifying affected Ubiquiti product versions and urging administrators to review Ubiquiti's advisory and apply updates.
Ubiquiti Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express, Express 7, and UniFi Gateways were reported as affected by vulnerabilities.
Some firmware releases fixing the UniFi firewall and gateway vulnerabilities had been available since the prior month.
Ubiquiti disclosed six network-reachable UniFi firewall and gateway vulnerabilities: three out-of-bounds writes, two out-of-bounds reads, and one uncontrolled-recursion issue, each rated CVSS 7.5. Fixed firmware includes version 5.1.31 for several product families, 4.0.21 for UniFi Express, and 5.1.26 for UniFi Gateways.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourceheise.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ubiquiti released security updates for **UniFi OS** to fix five vulnerabilities affecting widely deployed products including **UniFi Cloud Gateway, UniFi Dream Machine, UNVR, NAS devices, consoles, and UniFi OS Server**. Three flaws—`CVE-2026-34908`, `CVE-2026-34909`, and `CVE-2026-34910`—were rated **CVSS 10.0** and could be exploited by remote, unauthenticated attackers to change system settings, read sensitive files through path traversal, or trigger command injection that could lead to remote code execution. Two additional issues, `CVE-2026-33000` and `CVE-2026-34911`, could also enable command injection, path traversal, privilege escalation, persistence, and data theft under certain conditions. The vulnerabilities were reported through **HackerOne**, and Ubiquiti said they can be exploited with low complexity, although it did not say whether they had been abused before patches were issued. Government and national CERT advisories, including Canada’s Cyber Centre and Germany’s dCERT, directed administrators to review Ubiquiti bulletin 064 and apply updated firmware and software versions immediately. The risk is amplified by the large number of Internet-exposed UniFi OS systems—reportedly close to **100,000**—because these appliances often sit at the network edge and can provide attackers with a path into internal environments if management interfaces are publicly reachable.
Jun 29, 2026
Ubiquiti released Security Advisory Bulletin 065 to address five vulnerabilities in **UniFi OS**, including critical path traversal (`CVE-2026-47368`), privilege escalation (`CVE-2026-47369`), and command injection (`CVE-2026-47370`) flaws that affect a wide range of consoles, gateways, servers, NVRs, NAS devices, Dream Machines, Cloud Keys, and Express products. The advisory says a network-adjacent attacker could abuse the bugs to read arbitrary files, escalate privileges, execute commands, and in some cases make unauthorized configuration changes through `CVE-2026-48610`, with several issues rated as high as **CVSS 9.9**. Ubiquiti warned that the vulnerabilities can be chained, allowing attackers to remove privilege requirements and potentially reach full device compromise, echoing broader concern over repeated severe UniFi OS weaknesses. Firmware updates were issued with fixes in **UniFi OS 5.1.15** for most affected families, **5.1.16** for **UNAS** devices, and **4.0.15** for **Express** appliances; security reporting around the bulletin also urged organizations to patch all listed CVEs together and treat previously exposed, unpatched management interfaces as potentially compromised.
Jul 12, 2026
Ubiquiti has disclosed 25 vulnerabilities across its UniFi ecosystem in Security Advisory Bulletin 066, affecting **UniFi Connect, Talk, Access, Protect, Network Application, Protect Floodlight, and UniFi OS** on UDM, UNVR, and UNAS devices. The most severe issue, `CVE-2026-50746`, carries a **CVSS 10.0** rating and allows unauthenticated network-adjacent command injection in UniFi Connect, while several other flaws rated **9.9** can enable privilege escalation or full device compromise in UniFi Talk, UniFi Access, UniFi OS, and UniFi Protect. Ubiquiti also warned that `CVE-2026-54403` in UniFi OS can be chained with other bugs to bypass low-privilege requirements, increasing the risk of broader compromise. The disclosure aligns with broader Q2 2026 vulnerability trends showing attackers concentrating on **internet-facing access points** such as firewalls, VPNs, enterprise management panels, and authentication portals. AhnLab’s quarterly report highlighted UniFi OS among major enterprise-facing products affected during the quarter and noted that critical vulnerabilities and actively exploited flaws continued to rise, with **75 new entries** added to CISA’s Known Exploited Vulnerabilities catalog. Ubiquiti has released patched versions for all affected products and said **no interim workarounds are available**, making immediate patching and tighter protection of exposed administrative interfaces the primary defenses.
Jul 23, 2026