Critical Ubiquiti UniFi Vulnerabilities Allow Attackers to Seize Full Control of Underlying Systems

**Ubiquiti UniFi Vulnerabilities:** Ubiquiti disclosed two critical-to-high vulnerabilities in the UniFi Network Application — CVE-2026-22557 (CVSS 10.0), an unauthenticated path traversal that can allow full administrative compromise of hosts, and CVE-2026-22558 (CVSS 7.7), an authenticated NoSQL injection enabling privilege escalation — with affected versions listed and patched releases/mitigations advised; administrators are urged to update immediately and limit network exposure.