Critical severity9.9NVD Advisory· Published Jul 2, 2026· Updated Jul 9, 2026

CVE-2026-50747

Description

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

Affected products

UI/Unifi Talk Application
cpe:2.3:a:ui:unifi_talk_application:*:*:*:*:*:*:*:*
Range: <5.2.2
Ubiquiti Inc/Unifi Network Applicationllm-fuzzy

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000