CVE-2026-50746Patch(ui / unifi_connect_application)

MEDIUMCVSS 10.0 · CRITICAL

Exploitation observed; activity peaked at 13 mentions and remains active

Immediate actions

Patch ui unifi_connect_application systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

ui CVEs Back to dashboard

4.3/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

Weakness type (CWE)

CWE-284

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

DECLINING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

unifi_connect_application

Threat summary

Active exploitation appears in 2 classified signals
Patch or workaround signal is available
32 mentions across 10 observed days
Momentum state: declining

What's happening

Active exploitation reported across 2 signals
Patch or workaround mentioned in 23 signals
Technical details provided in 27 signals
Disclosure: 7 classified signals
General: 5 classified signals
Peaked 6d ago at 13 mentions (2026-07-08); latest day: 2
32 total mentions across 10 days

Affected systems

Vendors

Products

unifi_connect_application

Deep dive

Activity timeline32 mentions / 10d

Signal classification4 categories

Patch

1959.4%

Disclosure

721.9%

General

515.6%

Active Exploitation

13.1%

Referenced assets18 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-02	1	Disclosure1
2026-07-03	3	Disclosure2Patch1
2026-07-07	2	Disclosure1Patch1
2026-07-08	13	Disclosure1Patch12
2026-07-09	5	Disclosure1General2Patch2
2026-07-10	3	Active Exploitation1Disclosure1Patch1
2026-07-15	1	General1
2026-07-20	1	General1
2026-08-01	1	Patch1
2026-08-02	2	General1Patch1

Full discourse20 posts

SOCRadar®@socradar85d
Patch
A CVSS 10.0 is as bad as it gets. 🚨 Ubiquiti’s latest SAB-066 patch set fixes CVE-2026-50746—a network-reachable command injection flaw in UniFi Connect. Patch to 3.4.20+ immediately to mitigate the risk. (And check Talk, Access, Protect & OS while you're at it to strengthen your overall posture!) https://hubs.la/Q04nWVLc0 #Ubiquiti #UniFi #CyberSecurity #VulnerabilityManagement
Post summary
Ubiquiti disclosed a CVE‑2026‑50746 command injection flaw (CVSS 10.0) and released a patch; users should upgrade to 3.4.20+ immediately.
1502041.7K
7.1K followersView on X
Teegra 🧝‍♀️𝕏@Teeegra85d
Patch
یوبیکوئیتی (Ubiquiti) به‌روزرسانی‌های امنیتی برای رفع هفت آسیب‌پذیری بحرانی در سیستم‌عامل UniFi OS منتشر کرده است! مهم‌ترین این نقص‌ها با شناسه CVE-2026-50746 ردیابی می‌شود و دارای بالاترین سطح شدت است؛ این آسیب‌پذیری نرم‌افزار مدیریتی UniFi Connect Application (نسخه ۳.۴.۱۶ و قدیمی‌تر) را تحت تأثیر قرار می‌دهد و به مهاجمانی که به شبکه دسترسی دارند امکان می‌دهد از طریق حمله تزریق دستور (Command Injection) کنترل دستگاه میزبان را در دست بگیرند. این شرکت به کاربران توصیه کرده است برای محافظت از سیستم‌های خود، نرم‌افزار مذکور را به نسخه ۳.۴.۲۰ یا بالاتر ارتقا دهند. شش آسیب‌پذیری بحرانی دیگر نیز در برنامه‌های UniFi Talk، UniFi Access و UniFi Protect، و همچنین در روترها، دروازه‌ها (Gateways)، سیستم‌های ذخیره‌سازی تحت شبکه (NAS) و دوربین‌های مداربسته یوبیکوئیتی وصله‌گذاری شده‌اند. شرکت اطلاعات تهدید سایبری Censys اکنون بیش از ۱۰۰٬۰۰۰ نمونه از UniFi OS را که در معرض اینترنت قرار دارند ردیابی می‌کند که نزدیک به ۵۰٬۰۰۰ مورد از آن‌ها در ایالات متحده شناسایی شده‌اند!
Post summary
Ubiquiti released security updates for seven critical vulnerabilities, including CVE‑2026‑50746—a command‑injection flaw in UniFi Connect, advising users to upgrade to version 3.4.20 or later.
010101981
19.4K followersView on X
Daily CyberSecurity@Daily_CyberSec87d
Patch
Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now. #Ubiquiti #UniFi #UniFiOS #UniFiProtect #CommandInjection https://securityonline.info/unifi-security-advisory-066/
Post summary
Ubiquiti releases a patch for the critical CVE-2026-50746 command injection, urging immediate device updates.
00060765
12.9K followersView on X
Packet Commander ⚡️@JAVI_MEI85d
Patch
Ubiquiti Patches Max-Severity UniFi OS Command Injection Ubiquiti has disclosed seven critical vulnerabilities in UniFi OS, led by CVE-2026-50746 – a max-severity command injection flaw in the UniFi Connect app. Network-adjacent attackers can exploit improper access controls to run arbitrary commands on affected devices. With over 100,000 UniFi OS instances exposed online, organizations using these systems for building automation must patch immediately to avoid compromise and potential botnet recruitment. Nigerian and African enterprises relying on UniFi for surveillance and networking face elevated risk given regional targeting trends.
Post summary
Ubiquiti disclosed seven critical command injection flaws in UniFi OS and urged immediate patching of affected devices due to the risk of arbitrary command execution and potential botnet recruitment.
01100194
2.8K followersView on X
Adam@seoscottsdale86d
Patch
6 🚨 Critical Alert: Ubiquiti has patched a maximum-severity vulnerability — CVE-2026-50746 (CVSS 10.0 Critical) in the UniFi Connect Application (versions 3.4.16 and earlier). 2/6 Issue: Improper Access Control leading to command injection. An attacker with network access can execute arbitrary commands on the host device. No authentication required. 3/6 This is part of Security Advisory Bulletin 066, which fixes 25 vulnerabilities across the UniFi ecosystem — including 7 critical issues affecting UniFi OS, Protect, Access, Talk, Network, and more. 4/6 Risk note: Most of these flaws require only network access. Excellent for lateral movement once an attacker is inside your network. Prioritize patching if your UniFi management interface is reachable from the internet or less-trusted segments. 5/6 Immediate Actions: ✅ Update UniFi Connect to version 3.4.20 or later ✅ Restrict management access (use VPN/jump host — never expose directly to the internet) ✅ Segment building automation/IoT networks (lighting, EV chargers, etc.) 6/6 UniFi users — especially those running Connect for commercial building systems or broader UniFi stacks — should patch now. Full details: Ubiquiti Advisory + BleepingComputer coverage. #UniFi #CyberSecurity #Ubiquiti
Post summary
The advisory announces a critical command‑injection vulnerability (CVE‑2026‑50746) in Ubiquiti UniFi Connect, provides immediate patch and mitigation steps, and stresses the need for timely updates.
00020280
12.4K followersView on X
Jeff Hall - PCI Guru - #StandWithUkraine@jbhall5686d
Disclosure
The CVE-2026-50746 vulnerability affects UniFi Connect Application (versions 3.4.16 and earlier), a management software suite that Ubiquiti customers can use to automate and manage commercial building operations. https://www.bleepingcomputer.com/news/security/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability/
Post summary
The post announces the existence of CVE-2026-50746 affecting older UniFi Connect Application versions, but provides no additional technical, PoC, or patch details.
0001180
908 followersView on X
Kaitan ID Security@KaitanSecurity83d
Disclosure
🛡️ Ubiquiti UniFi: Two Criticals Across Connect and Access Ubiquiti's UniFi product line contributed two critical-severity entries. CVE-2026-50746 (CVSS 10.0) is an Improper Access Control flaw in the UniFi Connect Application exploitable…
Post summary
The post announces two critical vulnerabilities in Ubiquiti UniFi, including CVE‑2026‑50746—an improper access‑control flaw rated at CVSS 10.0.
1000046
85 followersView on X
Vistem Solutions@VistemSolutions84d
General
A new NVD entry is a reminder that vulnerability management starts with visibility. When a CVE is published, the next step is not just reading the score—it is understanding whether the affected technology exists in your environment, how exposed it is, and what business systems may be impacted. What organizations should prioritize now: - Review CVE-2026-50746 details from NVD and vendor advisories - Identify affected products, versions, assets, and internet-facing exposure - Prioritize remediation based on exploitability, business impact, and CISA KEV status - Apply vendor patches or mitigations and verify successful deployment - Monitor for suspicious activity tied to affected systems - Document remediation for compliance, audit readiness, and executive reporting 𝗩𝗶𝘀𝘁𝗲𝗺 𝗘𝗹𝗲𝘃𝗮𝘁𝗲 𝗽𝗼𝘄𝗲𝗿𝗲𝗱 𝗯𝘆 𝗩𝗶𝘀𝘁𝗲𝗺𝗦𝗲𝗰𝘂𝗿𝗲𝗣𝗿𝗼 helps organizations move from CVE awareness to action with vCISO-led strategy, prioritized remediation, continuous monitoring, and measurable security outcomes. Contact: sales@vistem.com | http://www.vistem.com?utm_source=in_page&utm_medium=Vistem+Solutions%2C+Inc.&utm_campaign=publer #Cybersecurity #NVD #CVE #VulnerabilityManagement #PatchManagement #RiskManagement #ThreatIntel #IncidentResponse #CyberResilience #VistemElevate #VistemSecurePro #VistemSolutions #SecurityCompliance https://nvd.nist.gov/vuln/detail/CVE-2026-50746?utm_source=in_page&utm_medium=Vistem+Solutions%2C+Inc.&utm_campaign=publer
Post summary
The post is a generic advisory urging organizations to review and remediate CVE‑2026‑50746, apply vendor patches, and monitor systems for suspicious activity.
0100048
78 followersView on X
Erik Nonaka@enetechnologys284d
Patch
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw tracked as CVE-2026-50746 that can be exploited in command injection attacks. https://www.bleepingcomputer.com/news/security/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability/ #Unifi #Ubiquiti #Vulnerability #ENETechnologyServicesGlendora
Post summary
Ubiquiti issued patches for seven critical UniFi OS vulnerabilities, including the high‑severity CVE-2026-50746 that enables command injection, to mitigate the risk.
00010123
1.0K followersView on X
Packet Commander ⚡️@JAVI_MEI85d
Patch
Ubiquiti warns of new max severity UniFi OS vulnerability. Today the company released patches for seven critical issues. The standout is CVE-2026-50746 - command injection in the UniFi Connect application. • Affects versions 3.4.16 and earlier • Network access = code execution • Update to 3.4.20+ Six more critical flaws hit other UniFi apps and hardware. Low complexity. No user interaction needed for several. Censys tracks over 100,000 exposed instances. Many still unpatched based on historical data. Threat actors love Ubiquiti gear for botnets. Remember Moobot in 2024. For IT managers in Nigeria and Africa: these systems run your buildings and surveillance. Don't delay patching. Segment management networks. Monitor logs. Practical advice: • Run full inventory • Prioritize internet-facing devices • Test updates in staging where possible Stay safe out there.
Post summary
Ubiquiti issued a security advisory for CVE-2026-50746, outlining command injection details, affected software versions, and the patch release/update path to address the issue.
01000123
2.8K followersView on X
Clone Systems@CloneSystemsInc86d
Patch
Ubiquiti has released security updates for CVE-2026-50746, a maximum severity vulnerability affecting UniFi Connect Application version 3.4.16 and earlier. The flaw could allow an attacker to gain full control of UniFi Connect managed environments, which may include building automation systems such as smart lighting, displays, EV chargers, and other connected infrastructure. For organizations using UniFi Connect, this is not just a networking issue. It is a reminder that connected physical systems can become part of the attack surface when management applications are not patched quickly. Admins should update UniFi Connect Application to version 3.4.17 or later, review exposed management access, and confirm that only trusted users and networks can reach administrative interfaces. When software manages the lights, doors, screens, and chargers, patching is no longer just IT housekeeping. It is operational risk management. #Ubiquiti #UniFi #CVE202650746 #VulnerabilityManagement #PatchManagement #NetworkSecurity #IoTSecurity #SmartBuildingSecurity #OperationalSecurity #CyberRisk
Post summary
The post announces Ubiquiti's patch for CVE-2026-50746, detailing the severity and urging a specific version upgrade to mitigate the full-control vulnerability.
0001089
259 followersView on X
ThreatWire@ThreatWire_86d
Patch
🚨 CVE-2026-50746: A critical UniFi command injection vulnerability (CVSS 10.0) has been patched in Ubiquiti Security Advisory 066. Users should update affected devices immediately. #CyberSecurity #CVE #Ubiquiti #ThreatWire
Post summary
The message informs that CVE‑2026‑50746, a critical UniFi command injection flaw (CVSS 10.0), has been patched in Ubiquiti Security Advisory 066 and urges immediate device updates.
0001092
65 followersView on X
Upwind Security MDR@UpwindMDR91d
Disclosure
🚨Critical - Ubiquiti UniFi Connect Application Unauthenticated Command Injection (CVE-2026-50746) An improper access control flaw in Ubiquiti's UniFi Connect Application lets a network-adjacent attacker inject and execute arbitrary OS commands on the host device - with no authentication required. Missing access controls turn network reachability alone into command execution on the underlying host. The flaw is remotely exploitable with low complexity, no privileges, and no user interaction, and CISA assessed it as automatable - a maximum-severity CVSS 10.0. Successful exploitation gives full command execution on the UniFi Connect host. 👉Upgrade to UniFi Connect Application 3.4.20.
Post summary
The advisory announces a critical unauthenticated command injection flaw (CVE-2026-50746) in Ubiquiti UniFi Connect, details its severity and impact, and recommends upgrading to version 3.4.20.
00010126
236 followersView on X
Smarteck 🇨🇱@Smarteck_cl60d
Patch
🔒 Ubiquiti publicó un parche urgente para 25 vulnerabilidades detectadas en todo su ecosistema UniFi. La más crítica, CVE-2026-50746, tiene CVSS 10.0 por control de acceso deficiente en UniFi Connect, y hay varias más con CVSS 9.9 como inyección SQL en UniFi Talk e inyección de comandos en UniFi Access y UniFi OS. La recomendación oficial es clara: quienes operan hardware UDM, UNVR o UNAS deben actualizar el firmware de inmediato en vez de esperar la ventana de mantenimiento programada. Las versiones corregidas ya están disponibles para cada producto afectado. https://cybersecuritynews.com/ubiquiti-disclosed-25-flaws/ #Ciberseguridad #Ubiquiti #Networking Quieres conocer novedades tecnologicas? Sigue @smarteck_cl Tambien te seguiremos 🤝
Post summary
Ubiquiti has issued an urgent patch for 25 vulnerabilities, including the critical CVE‑2026‑50746 with CVSS 10.0, and urges immediate firmware updates; no evidence of active exploitation or PoC is reported.
0000084
1.9K followersView on X
IntegSec@integ_sec60d
General
CVE-2026-50746: UniFi Connect Application Improper Access Control Leading to Command Injection - What It Means for Your Business and How to Respond https://hubs.li/Q04rBJhm0
Post summary
The snippet presents a headline about a CVE‑2026‑50746 vulnerability in UniFi Connect with a brief description of the flaw but lacks concrete details on PoC, exploit, patch, or active exploitation.
0000047
32 followersView on X
Smarteck 🇨🇱@Smarteck_cl62d
Patch
🔒 Ubiquiti publicó un parche urgente para 25 vulnerabilidades detectadas en todo su ecosistema UniFi. La más crítica, CVE-2026-50746, tiene CVSS 10.0 por control de acceso deficiente en UniFi Connect, y hay varias más con CVSS 9.9 como inyección SQL en UniFi Talk e inyección de comandos en UniFi Access y UniFi OS. La recomendación oficial es clara: quienes operan hardware UDM, UNVR o UNAS deben actualizar el firmware de inmediato en vez de esperar la ventana de mantenimiento programada. Las versiones corregidas ya están disponibles para cada producto afectado. https://cybersecuritynews.com/ubiquiti-disclosed-25-flaws/ #Ciberseguridad #Ubiquiti #Networking Quieres conocer novedades tecnologicas? Sigue @smarteck_cl Tambien te seguiremos 🤝
Post summary
Ubiquiti released an urgent firmware patch for 25 severe vulnerabilities, including CVE-2026-50746, and advises operators to update immediately to mitigate access control, SQL injection, and command injection flaws.
0000072
1.9K followersView on X
CERT-PY@CERTpy73d
General
⚠️ Vulnerabilidades en productos Ubiquiti ❗ CVE-2026-54402 ❗ CVE-2026-50747 ❗ CVE-2026-50746 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ubiquiti-5/ https://t.co/X2hc3s6LUX
Post summary
The statement lists several CVE identifiers related to Ubiquiti products but provides no additional technical details, PoC links, or information about exploitation or mitigation.
00000174
6.7K followersView on X
Ergun Akman@AturcDestek79d
General
🚨 Ubiquiti 25 Yeni UniFi Güvenlik Açığını Duyurdu: CVE-2026-50746 ile Kritik Seviyede 10.0 Puanlı Kimlik Doğrulaması Gerektirmeyen Komut Enjeksiyonu! https://www.linkedin.com/pulse/ubiquiti-25-yeni-unifi-g%25C3%25BCvenlik-a%25C3%25A7%25C4%25B1%25C4%259F%25C4%25B1n%25C4%25B1-duyurdu-ile-kritik-akman-lorwf @LinkedIn aracılığıyla
Post summary
The post announces a new high‑severity authentication‑less command injection vulnerability (CVE‑2026‑50746) without providing proof of concept, exploitation details, or remediation steps.
0000059
18 followersView on X
Wes DeVault, CISSP@wvipersg84d
Patch
Ubiquiti Fixes Critical CVE-2026-50746 and Multiple UniFi OS Vulnerability Flaws https://ift.tt/akGLNMD
Post summary
Ubiquiti has released a patch for the critical CVE-2026-50746 and additional UniFi OS vulnerability flaws.
0000063
292 followersView on X
ThreadLinqs@threadlinqs84d
Active Exploitation
UniFi Connect's CVE-2026-50746 is a perfect 10.0 - unauth attackers run host commands on 100K+ exposed devices. https://intel.threadlinqs.com/threat/TL-2026-1159 #ThreatIntel #CVE_2026_50746 #CVE_2026_50747 #SAB066 https://t.co/fVkZOuUyn9
Post summary
The tweet reports that CVE‑2026‑50746 is being actively exploited, allowing unauthenticated attackers to execute host commands on over 100,000 exposed UniFi devices.
0000054
100 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ui	unifi_connect_application	-	-	-

Explore more

Back to dashboard ui CVEs unifi_connect_application vulnerabilities

What researchers are saying

CVE-2026-50746

SOCRadar®[verified]@socradarPatch

Ubiquiti disclosed a CVE‑2026‑50746 command injection flaw (CVSS 10.0) and released a patch; users should upgrade to 3.4.20+ immediately.

Teegra 🧝‍♀️𝕏[verified]@TeeegraPatch

Ubiquiti released security updates for seven critical vulnerabilities, including CVE‑2026‑50746—a command‑injection flaw in UniFi Connect, advising users to upgrade to version 3.4.20 or later.

Packet Commander ⚡️[verified]@JAVI_MEIPatch

Ubiquiti disclosed seven critical command injection flaws in UniFi OS and urged immediate patching of affected devices due to the risk of arbitrary command execution and potential botnet recruitment.

Adam[verified]@seoscottsdalePatch

The advisory announces a critical command‑injection vulnerability (CVE‑2026‑50746) in Ubiquiti UniFi Connect, provides immediate patch and mitigation steps, and stresses the need for timely updates.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The post announces two critical vulnerabilities in Ubiquiti UniFi, including CVE‑2026‑50746—an improper access‑control flaw rated at CVSS 10.0.

Vistem Solutions[verified]@VistemSolutionsGeneral

The post is a generic advisory urging organizations to review and remediate CVE‑2026‑50746, apply vendor patches, and monitor systems for suspicious activity.

Erik Nonaka[verified]@enetechnologys2Patch

Ubiquiti issued patches for seven critical UniFi OS vulnerabilities, including the high‑severity CVE-2026-50746 that enables command injection, to mitigate the risk.

Packet Commander ⚡️[verified]@JAVI_MEIPatch

Ubiquiti issued a security advisory for CVE-2026-50746, outlining command injection details, affected software versions, and the patch release/update path to address the issue.