Vulnerabilities & Exploits · Zero-Day Exploit
Partial UniFi patching leaves the stack exposed UniFi appliances do not become safe just because the host OS is updated. Ubiquiti split fixes across UniFi OS and the bundled apps, so leaving any one layer behind can still leave a command injection or privilege-escalation path on the same device.
The new advisory covers 25 UniFi flaws across UniFi OS, Connect, Talk, Access, and Protect. That includes seven critical bugs in UniFi OS and six CVEs CISA already marked as overdue KEV items, with fixes landing in UniFi Connect 3.4.20 , UniFi Talk 5.2.2 , UniFi Access 4.2.29 , UniFi Protect 7.1.83 , and UniFi OS 5.1.19 .
The practical risk is a shared appliance stack where one exposed app can still hand an attacker control even after another layer is patched. For teams running UniFi management gear, the target is the whole stack, not a single product name.
5 sources · Jul 8
CVEs in this update
10 CVEs
Across UniFi OS Server, UDM, UDM-Pro, and related packages.
10 critical · 0 high · 0 medium · 0 low
3 in CISA KEV · 3 with EPSS above 1%
Highest severity: CVE-2026-34908 · 10.0 CRITICAL
Highest EPSS: CVE-2026-54402 · 1.8%
Timeline Sources Jul 8 FortiGuard Labs Threat Signals
Threat Signal Report | FortiGuard Labs
What is the Vulnerability?Multiple critical vulnerabilities affecting Ubiquiti UniFi OS can be chained together to achieve unauthenticated remote c...
original Jul 8 The Hacker News
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti fixes seven critical UniFi flaws across Connect, Talk, Access, Protect, and OS, with no evidence of exploitation in the wild found.
original Jul 8 CSIRT Italia / ACN
Risolte vulnerabilità nei prodotti Ubiquiti
Rilasciati aggiornamenti di sicurezza per risolvere 25 vulnerabilità, di cui 7 con gravità “critica” e 18 con gravità “alta”, in prodotti Ubiquiti.
original Part of the PlainSec briefing for 2026-07-09
Every edition of this story: Partial UniFi patching leaves the stack exposed
More from today Vulnerabilities & Exploits · Zero-Day Exploit
Partial UniFi patching leaves the stack exposed UniFi appliances do not become safe just because the host OS is updated. Ubiquiti split fixes across UniFi OS and the bundled apps, so leaving any one layer behind can still leave a command injection or privilege-escalation path on the same device.
The new advisory covers 25 UniFi flaws across UniFi OS, Connect, Talk, Access, and Protect. That includes seven critical bugs in UniFi OS and six CVEs CISA already marked as overdue KEV items, with fixes landing in UniFi Connect 3.4.20 , UniFi Talk 5.2.2 , UniFi Access 4.2.29 , UniFi Protect 7.1.83 , and UniFi OS 5.1.19 .
The practical risk is a shared appliance stack where one exposed app can still hand an attacker control even after another layer is patched. For teams running UniFi management gear, the target is the whole stack, not a single product name.
5 sources · Jul 8
CVEs in this update
10 CVEs
Across UniFi OS Server, UDM, UDM-Pro, and related packages.
10 critical · 0 high · 0 medium · 0 low
3 in CISA KEV · 3 with EPSS above 1%
Highest severity: CVE-2026-34908 · 10.0 CRITICAL
Highest EPSS: CVE-2026-54402 · 1.8%
Timeline Sources Jul 8 FortiGuard Labs Threat Signals
Threat Signal Report | FortiGuard Labs
What is the Vulnerability?Multiple critical vulnerabilities affecting Ubiquiti UniFi OS can be chained together to achieve unauthenticated remote c...
original Jul 8 The Hacker News
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti fixes seven critical UniFi flaws across Connect, Talk, Access, Protect, and OS, with no evidence of exploitation in the wild found.
original Jul 8 CSIRT Italia / ACN
Risolte vulnerabilità nei prodotti Ubiquiti
Rilasciati aggiornamenti di sicurezza per risolvere 25 vulnerabilità, di cui 7 con gravità “critica” e 18 con gravità “alta”, in prodotti Ubiquiti.
original Part of the PlainSec briefing for 2026-07-09
Every edition of this story: Partial UniFi patching leaves the stack exposed
More from today