Critical vulnerabilities in Ubiquiti UniFi products allow for unauthorized access and remote control
Summary
A critical improper access control vulnerability in the Ubiquiti UniFi Connect Application allows an attacker to execute arbitrary commands on a host device. This flaw, identified as CVE-2026-50746, carries a CVSS score of 10.0, reflecting its maximum severity level.
The vulnerability exists because the application fails to properly restrict access or validate inputs, enabling a malicious actor with network access to inject commands directly into the underlying system. Successful exploitation results in full compromise of the host device's confidentiality, integrity, and availability.
Technical details
The core issue stems from an Improper Access Control flaw within the UniFi Connect Application environment. This specific weakness allows for command injection, a technique where an attacker provides specially crafted input that the application then executes as a system-level command.
Because the vulnerability is tied to access control failures, any actor who can reach the application on the local network can bypass intended restrictions. Once the command injection is triggered, the attacker gains the ability to run unauthorized instructions on the host hardware, potentially leading to complete device takeover and lateral movement within the network.
Affected products and fixed versions
The vulnerability specifically impacts the UniFi Connect Application. While specific version numbers for the vulnerable builds are not detailed in the provided advisory text, the security bulletin indicates that a fix is now available through official channels.
| Product | Vulnerability | Severity | CVSS Score |
|---|---|---|---|
| UniFi Connect Application | CVE-2026-50746 |
Critical | 10.0 |
Defender guidance
Defenders should prioritize updating the UniFi Connect Application to the latest version provided by Ubiquiti. Since this vulnerability requires network access to exploit, ensuring that management interfaces are not exposed to untrusted networks is a critical secondary defense.
Immediate actions include:
- Verifying the current version of the UniFi Connect Application in use across all deployments.
- Applying the security updates released via the official Ubiquiti community and release channels.
- Monitoring network logs for unusual command execution patterns or unexpected outbound connections originating from the host running the Connect application.
Sources
