Critical severity10.0NVD Advisory· Published Jul 2, 2026· Updated Jul 29, 2026

CVE-2026-50746

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

Affected products

UI/Unifi Connect Application
cpe:2.3:a:ui:unifi_connect_application:*:*:*:*:*:*:*:*
Range: <3.24.20
Unify/Connect Applicationllm-fuzzy
Ubiquiti Inc/UniFi Protect Applicationllm-fuzzy

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000