Ubiquiti Patches Three Maximum-Severity UniFi Vulnerabilities
Summary
Ubiquiti patched three maximum-severity flaws in UniFi Protect, UniFi OS and UniFi Talk that could enable remote authentication bypass or command injection. It also fixed 18 other critical issues; exploitation of the three flaws is undisclosed.
Key points
- CVE-2026-77537 is an improper input validation flaw in UniFi Protect that could let unauthenticated attackers compromise unpatched devices.
- CVE-2026-77550 is a CRLF injection flaw that could let remote attackers bypass authentication on UniFi OS devices or instances.
- CVE-2026-77554 is an improper input validation flaw in UniFi Talk that could enable command injection.
- Ubiquiti says the vulnerabilities can be exploited remotely in low-complexity attacks without user interaction; it has not disclosed whether they were exploited before patching.
- The article lists UniFi Protect Application 7.2.105 or later, UniFi Talk Application 5.3.2 or later, and UniFi OS Server 5.1.21 and earlier in connection with the fixes.
- Ubiquiti also patched 18 other critical issues across products including routers, gateways, NAS and surveillance systems.
- Censys tracks more than 100,000 internet-exposed UniFi OS instances, but its data may include historical scans and the number of vulnerable systems is unknown.
Article Details
- Vulnerability Types
- Improper input validation
- CRLF injection
- Command injection
- Severity
- Maximum severity
- Exploitation Status
- unknown
- Exploit Availability
- unknown
- Patch Status
- available
CVE
Threat Actors
Malware
Vendors
Products
Ubiquiti UniFi OSUbiquiti has released patches for three maximum-severity flaws affecting UniFi Protect, UniFi OS, and UniFi Talk that could let remote attackers bypass authentication or trigger command injection without privileges.UniFi Network Applicationsecurity issues affecting a wide range of products, from the company’s UniFi OS Server to the UniFi Network Application centralized network management platform, the UniFi Protect AI Key hardware edge-computingUniFi OS ServerThe company addressed these flaws in UniFi Protect Application 7.2.105 or later, UniFi Talk Application 5.3.2 or later, and UniFi OS Server 5.1.21 and earlier.UniFi Protect AI KeyUniFi OS Server to the UniFi Network Application centralized network management platform, the UniFi Protect AI Key hardware edge-computing appliance, and a large selection of Ubiquiti routers, gateways, NAS, andUniFi Protect ApplicationCVE-2026-77537 affects UniFi Protect Application through improper input validation.UniFi Talk ApplicationCVE-2026-77554 is a command injection flaw in the UniFi Talk Application.