Ubiquiti said it has fixed 22 UniFi vulnerabilities across UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access, UniFi Talk, UniFi OS Server, UID Enterprise Agent, and related appliances. The Dutch NCSC published the advisory on August 27 and said the issues include OS command injection, CRLF injection, and active debug code.
In plain terms, some requests were not being checked tightly enough, so a network attacker could get a malformed request treated as a command, slip extra line breaks past an authentication check, or use debug code to raise privileges. That means the impact is not limited to one app bug: a reachable UniFi component can become a foothold for command execution, auth bypass, or privilege escalation on the host it runs on.
For operators, the important part is where UniFi sits in the environment. If a controller or appliance is the management plane for other gear, the exposure can extend beyond the box that carries the flaw, and patching one component does not erase the trust relationships built around it.
Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Ubiquiti has released patches for 22 UniFi vulnerabilities, including three maximum-severity 10.0 CVSS flaws that allow hackers to gain full device access.