Ubiquiti Faces Critical Vulnerabilities in UniFi Ecosystem

Ubiquiti released patches for 22 vulnerabilities—three rated CVSS 10.0—affecting UniFi OS, UniFi Protect, and UniFi Talk; several flaws allow unauthenticated remote code execution, privilege escalation, and authentication bypass with low complexity and no user interaction. With threat intelligence indicating over 100,000 exposed UniFi OS instances, Ubiquiti urges immediate updates despite reporting no confirmed in-the-wild exploitation.