Ubiquiti Patches Critical UniFi OS Vulnerabilities Allowing Remote Privilege Escalation

Ubiquiti released urgent patches for five severe UniFi OS vulnerabilities—three rated CVSS 10.0—including unauthenticated remote code execution, path traversal, and command injection affecting UCG, UDM, UNVR, UniFi OS Server, and other appliances. Administrators are instructed to apply specific firmware versions (e.g., 5.1.12, 5.0.8) immediately and to restrict internet exposure of management interfaces to prevent full device and network compromise.