CVE-2026-50746: Ui Unifi Connect Application

What is CVE-2026-50746?

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

CVSS10 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS2% · P76

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWECWE-284

NVD published2026-07-02

NVD last modified2026-07-29

Timeline

2026-07-02Published to the U.S. National Vulnerability Database (NVD)
2026-07-09First covered in a defend.network daily briefing
2026-07-29NVD record last updated

Affected product

Ui Unifi Connect Application

Remediation Steps

Update Ubiquiti UniFi Connect to the latest available version from Ubiquiti
Also patch UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS as they contain related critical vulnerabilities
Verify successful application of all security updates
Monitor for unauthorized privilege escalation or command execution attempts

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 1 of July 2026 (July 6 – 12)
Ubiquiti UniFi critical patches; HalluSquatting targets AI coding assistants (2026-07-09)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.