Vulnerabilities · 47 days ago
Ubiquiti Fixes UniFi Control-Plane Entry Points Ubiquiti said it has fixed 22 UniFi vulnerabilities across UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access, UniFi Talk, UniFi OS Server, UID Enterprise Agent, and related appliances. The Dutch NCSC published the advisory on August 27 and said the issues include OS command injection, CRLF injection, and active debug code.
In plain terms, some requests were not being checked tightly enough, so a network attacker could get a malformed request treated as a command, slip extra line breaks past an authentication check, or use debug code to raise privileges. That means the impact is not limited to one app bug: a reachable UniFi component can become a foothold for command execution, auth bypass, or privilege escalation on the host it runs on.
For operators, the important part is where UniFi sits in the environment. If a controller or appliance is the management plane for other gear, the exposure can extend beyond the box that carries the flaw, and patching one component does not erase the trust relationships built around it.
CVEs in this update
336 CVEs
Across OpenSSL, FreeBSD OS, Chrome.
5 critical · 11 high · 1 medium · 0 low
0 in CISA KEV · 2 with EPSS above 1%
Highest severity: CVE-2026-79275 · 9.6 CRITICAL
Highest EPSS: CVE-2026-18798 · 1.5%
Showing the top 10 by KEV, EPSS, and severity.
Timeline Sources 4 sources covering this story
NCSC-NL Advisories Aug 27
Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti
Ubiquiti heeft kwetsbaarheden verholpen in verschillende UniFi-producten, waaronder UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge en UniFi Talk.
CyberScoop Aug 26
Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Ubiquiti has released patches for 22 UniFi vulnerabilities, including three maximum-severity 10.0 CVSS flaws that allow hackers to gain full device access.
CSIRT Italia / ACN Aug 26
Aggiornamenti disponibili per i prodotti Ubiquiti
Aggiornamenti di sicurezza hanno sanato 23 vulnerabilità, di cui 22 con gravità "critica" e una con gravità "alta", presenti in vari prodotti UniFi.
BleepingComputer Aug 26
Ubiquiti patches three max severity security vulnerabilities
Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.
Part of the PlainSec briefing for 2026-08-27
Editions Related stories Vulnerabilities · 47 days ago
Ubiquiti Fixes UniFi Control-Plane Entry Points Ubiquiti said it has fixed 22 UniFi vulnerabilities across UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access, UniFi Talk, UniFi OS Server, UID Enterprise Agent, and related appliances. The Dutch NCSC published the advisory on August 27 and said the issues include OS command injection, CRLF injection, and active debug code.
In plain terms, some requests were not being checked tightly enough, so a network attacker could get a malformed request treated as a command, slip extra line breaks past an authentication check, or use debug code to raise privileges. That means the impact is not limited to one app bug: a reachable UniFi component can become a foothold for command execution, auth bypass, or privilege escalation on the host it runs on.
For operators, the important part is where UniFi sits in the environment. If a controller or appliance is the management plane for other gear, the exposure can extend beyond the box that carries the flaw, and patching one component does not erase the trust relationships built around it.
CVEs in this update
336 CVEs
Across OpenSSL, FreeBSD OS, Chrome.
5 critical · 11 high · 1 medium · 0 low
0 in CISA KEV · 2 with EPSS above 1%
Highest severity: CVE-2026-79275 · 9.6 CRITICAL
Highest EPSS: CVE-2026-18798 · 1.5%
Showing the top 10 by KEV, EPSS, and severity.
Timeline Sources 4 sources covering this story
NCSC-NL Advisories Aug 27
Kwetsbaarheden verholpen in UniFi-producten van Ubiquiti
Ubiquiti heeft kwetsbaarheden verholpen in verschillende UniFi-producten, waaronder UniFi Protect, UniFi OS, UniFi Network Application, UniFi Connect, UniFi Access Application, UniFi OS Server, UID Enterprise Agent, UniFi Connect Display Cast Pro, UniFi Enterprise Audio/Video Bridge en UniFi Talk.
CyberScoop Aug 26
Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
Ubiquiti has released patches for 22 UniFi vulnerabilities, including three maximum-severity 10.0 CVSS flaws that allow hackers to gain full device access.
CSIRT Italia / ACN Aug 26
Aggiornamenti disponibili per i prodotti Ubiquiti
Aggiornamenti di sicurezza hanno sanato 23 vulnerabilità, di cui 22 con gravità "critica" e una con gravità "alta", presenti in vari prodotti UniFi.
BleepingComputer Aug 26
Ubiquiti patches three max severity security vulnerabilities
Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.
Part of the PlainSec briefing for 2026-08-27
Editions Related stories