Critical severity9.9NVD Advisory· Published Jul 2, 2026· Updated Aug 17, 2026

CVE-2026-50748

Description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

Affected products

UI/Unifi Access
cpe:2.3:a:ui:unifi_access:*:*:*:*:*:*:*:*
Range: <4.2.29
Unify/Access Applicationllm-create

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000