Ubiquiti UniFi Critical Flaws Exposed: CVE-2026-50746 and Companion Vulnerabilities
Ubiquiti released emergency patches for seven critical UniFi flaws, including a perfect‑score CVE‑2026‑50746 that enables unauthenticated command injection.
Tag archive
Ubiquiti released emergency patches for seven critical UniFi flaws, including a perfect‑score CVE‑2026‑50746 that enables unauthenticated command injection.
Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.
Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.
Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.

In 2026, networks face more demands than ever. Devices connect faster, and data flows heavier. The...

In one of our recent deployments, we ran into a problem we didn’t expect. The network was performing...

Ubiquiti’s $99 UniFi 5G Backup turns cellular failover into a cheap add-on for UniFi sites.
Image: Ubiquiti / official product image Disclosure: This article contains affiliate links. If...

In today’s fast-paced digital world, having a robust networking and surveillance setup is crucial....

Glossary: 4B = 4 Model B 3B+ = 3 Model B+ Step 1 Set up the Raspberry Pi...