VulnSocial

CVE-2026-21633Disclosure(ui / unifi_protect)

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the adjacent network could obtain unauthorized access to a UniFi Protect Camera by exploiting a discovery protocol vulnerability in the Unifi Protect Application (Version 6.1.79 and earlier). Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.

ui CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • unifi_protect

Threat summary

  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 5 signals
  • Disclosure: 3 classified signals
  • General: 3 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-06-08)
  • 6 total mentions across 3 days

Affected systems

Vendors
ui
Products
unifi_protect

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-02-25: 2Mentions · 2026-02-27: 1Mentions · 2026-06-08: 3Technical Details · 2026-02-25: 2Technical Details · 2026-02-27: 1Technical Details · 2026-06-08: 202-2502-2706-08
Signal classification2 categories
Disclosure
350.0%
General
350.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-252
Disclosure2
2026-02-271
Disclosure1
2026-06-083
General3
Full discourse6 posts
  • TheZDIBugs@TheZDIBugs
    Disclosure

    [ZDI-26-126|CVE-2026-21633] (Pwn2Own) Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability (CVSS 5.4; Credit: David BERARD from @Synacktiv) https://www.zerodayinitiative.com/advisories/ZDI-26-126/

    Post summary

    A new CVE (CVE-2026-21633) for Ubiquiti Networks AI Pro Discovery Protocol missing encryption downgrade vulnerability has been disclosed with a CVSS score of 5.4, but no PoC, exploit, or patch details are provided.

    010741.3K
    5.3K followersView on X
  • TheZDIBugs@TheZDIBugs
    Disclosure

    [ZDI-26-127|CVE-2026-21633] (Pwn2Own) Ubiquiti Networks AI Pro Cleartext Transmission Information Disclosure Vulnerability (CVSS 5.3; Credit: David BERARD of @Synacktiv) https://www.zerodayinitiative.com/advisories/ZDI-26-127/

    Post summary

    An advisory for CVE-2026-21633, a cleartext transmission information disclosure vulnerability in Ubiquiti Networks AI Pro, with CVSS 5.3, credited to David BERARD of Synacktiv.

    01042855
    5.3K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The tweet simply enumerates UniFi CVEs with their CVSS scores, offering no further technical, exploit, or mitigation information.

    00000116
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The post summarizes a list of high-scoring CVEs for various UniFi products in 2026, without providing details on exploitation, patches, or PoCs.

    0000057
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The tweet is a simple recap of 2026 UniFi CVEs with their severity scores, lacking any PoC, exploit, patch, or technical detail information.

    00000110
    1.2K followersView on X
  • SystemTek - Technology news website@SystemTek_UK
    Disclosure

    Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability (CVE-2026-21633) #CVE202621633 #CyberSecurity #ProtocolDowngradeVulnerability #UbiquitiNetworks https://www.systemtek.co.uk/?p=48552 https://t.co/aoku0bFRmp

    Post summary

    The tweet announces CVE-2026-21633 as a protocol downgrade vulnerability in Ubiquiti's AI Pro Discovery Protocol, providing a link for additional details.

    0000044
    1.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appuiunifi_protect---

Explore more

Back to dashboardui CVEsunifi_protect vulnerabilities