Ubiquiti patches three max severity security vulnerabilities

Ubiquiti released patches for three maximum-severity, unauthenticated remote vulnerabilities impacting UniFi Protect, UniFi Talk, and UniFi OS—rooted in improper input validation, CRLF injection, and command injection—and urged updating to fixed versions; the report highlights a large number of Internet-exposed UniFi instances and contextualizes the risk with past Ubiquiti-focused botnets and exploited vulnerabilities, though it notes no confirmed in-the-wild exploitation of these specific CVEs yet.