Ubiquiti Faces Critical Vulnerabilities in UniFi Ecosystem

Ubiquiti has patched 22 vulnerabilities, including 21 rated critical, in its UniFi ecosystem. The vulnerabilities allow remote attackers to bypass authentication, escalate privileges, and execute arbitrary commands without requiring user interaction. Key vulnerabilities include CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554, all published on August 26, 2026. Affected systems include UniFi Protect, UniFi Talk, and various UniFi OS devices such as routers and NAS. Ubiquiti has not confirmed any active exploitation of these vulnerabilities but urges immediate updates. The vulnerabilities are characterized by low attack complexity and require only network access to exploit. The security advisory emphasizes the urgency of applying the patches to prevent potential attacks.

Key Points: • Ubiquiti patched 22 vulnerabilities, 21 rated critical. • Attackers can exploit flaws to gain full control without user interaction. • Immediate updates are recommended for all affected UniFi OS devices.