Ubiquiti Fixes Critical CVE-2026-50746 and Multiple UniFi OS Vulnerability Flaws

Ubiquiti published Security Advisory Bulletin 066 on July 2, 2026, addressing 25 vulnerabilities across UniFi OS and associated apps; the most severe is CVE-2026-50746 (CVSS 10.0) — a command injection in UniFi Connect — with several other critical (9.9) and high-severity flaws affecting UniFi Talk, Access, Protect, Network and many UniFi devices. The advisory provides fixed versions (e.g., UniFi OS 5.1.19+, UniFi Connect 3.4.20+, UniFi Talk 5.2.2, UniFi Access 4.2.29, UniFi Protect 7.1.83, UniFi Network 10.4.57), warns that some issues can be chained to increase impact, and recommends prompt updates to mitigate risk.