Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti released updates to address multiple critical vulnerabilities across UniFi Connect, Talk, Access, Protect, and UniFi OS (including CVE-2026-50746, CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-55115, CVE-2026-54402, and CVE-2026-55116) that could enable command injection, SSRF, privilege escalation, and unauthorized changes; affected versions and fixed release numbers are listed. There is no evidence these specific flaws have been exploited in the wild, but related UniFi OS vulnerabilities were recently flagged by CISA as weaponized and prior campaigns (e.g., MooBot) have enlisted compromised Ubiquiti devices into botnets.