--- title: Ubiquiti warns of new max severity UniFi OS vulnerability description: Ubiquiti has released security updates addressing seven critical vulnerabilities in UniFi OS. The most severe, CVE-2026-50746 (maximum CVSS score), affects... canonical: https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Ubiquiti warns of new max severity UniFi OS vulnerability | daily.dev og:description: Ubiquiti has released security updates addressing seven critical vulnerabilities in UniFi OS. The most severe, CVE-2026-50746 (maximum CVSS score), affects... og:url: https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x og:image: https://api.daily.dev/og/posts/JCGjhLz0X.png og:image:alt: Ubiquiti warns of new max severity UniFi OS vulnerability og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ubiquiti warns of new max severity UniFi OS vulnerability **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Ubiquiti has released security updates addressing seven critical vulnerabilities in UniFi OS. The most severe, CVE-2026-50746 (maximum CVSS score), affects UniFi Connect Application versions 3.4.16 and earlier and allows network-adjacent attackers to perform command injection on host devices. Six additional critical flaws were patched across UniFi Talk, UniFi Access, UniFi Protect, UniFi OS Server, and a wide range of Ubiquiti routers, gateways, NAS, and surveillance systems. Most of the six additional CVEs can be exploited in low-complexity attacks requiring no user interaction. Over 100,000 UniFi OS instances are currently exposed online, with nearly 50,000 in the United States. Ubiquiti has not confirmed whether any vulnerabilities were exploited before patching. The company has a history of being targeted by state-sponsored groups and cybercriminals, including a 2024 FBI-dismantled GRU-linked botnet built on Ubiquiti routers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Ubiquiti patches three max severity security vulnerabilities](https://daily.dev/posts/ubiquiti-patches-three-max-severity-security-vulnerabilities-sqjb5anhz) · BleepingComputer · 0 upvotes · 0 comments - [Critical UniFi OS bug lets hackers gain root without authentication](https://daily.dev/posts/critical-unifi-os-bug-lets-hackers-gain-root-without-authentication-wfqtinglo) · BleepingComputer · 0 upvotes · 0 comments - [CISA warns of max severity Ubiquiti flaws exploited in attacks](https://daily.dev/posts/cisa-warns-of-max-severity-ubiquiti-flaws-exploited-in-attacks-28ufbhywd) · BleepingComputer · 0 upvotes · 0 comments - [This Week In Security: Ubiquiti Fixes, And FreeBSD Joins The Club You Don’t Want To Join](https://daily.dev/posts/this-week-in-security-ubiquiti-fixes-and-freebsd-joins-the-club-you-don-t-want-to-join-ttpvp3amh) · Hackaday · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Ubiquiti warns of new max severity UniFi OS vulnerability","url":"https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x"},"datePublished":"2026-07-08T08:17:40.837Z","dateModified":"2026-08-24T06:58:26.127Z","description":"Ubiquiti has released security updates addressing seven critical vulnerabilities in UniFi OS. The most severe, CVE-2026-50746 (maximum CVSS score), affects...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f46371dfafa14c9b576085f47ab11fa6?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f46371dfafa14c9b576085f47ab11fa6?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability-jcgjhlz0x","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Ubiquiti warns of new max severity UniFi OS vulnerability"}]} ```