Ubiquiti warns of new max severity UniFi OS vulnerability

Ubiquiti Inc. has issued security updates addressing seven critical vulnerabilities in its UniFi OS, which powers its networking hardware. The most severe flaw, CVE-2026-50746, carries a maximum severity rating and allows command injection attacks, potentially enabling remote attackers to execute arbitrary commands on affected devices. The vulnerabilities affect a wide range of UniFi products, including access points, switches, and gateways. Ubiquiti urges all users to update their firmware immediately to mitigate the risk. The company did not disclose whether any of the flaws have been exploited in the wild. This patch follows a pattern of periodic security updates for the UniFi ecosystem.

Global Impact

This vulnerability has significant implications for Ubiquiti's large installed base, which includes small businesses, enterprises, and home users worldwide. Economically, the cost of patching and potential breach remediation could be substantial for organizations.