Three 10.0 security flaws fixed across Ubiquiti’s UniFi line
CN
CyberNew Threat Research Desk
•Original Reporting: CyberScoop
CyberNew Threat Intel Assessment
Assessed Severity:
CRITICAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Threat Intelligence & APT
Analyst Takeaway
"Ubiquiti has patched 21 critical vulnerabilities, three of which were rated the highest severity possible, the communications product company said Wednesday in a security bulletin. In all, the company patched 22 vulnerabilities, with the last one rated “high,” it said in the bulletin . Three of the vulnerabilities had a Common Vulnerability Scoring System rating of 10 out of 10. Each of them..."
Recommended Defense & Mitigation
Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Ubiquiti has patched 21 critical vulnerabilities, three of which were rated the highest severity possible, the communications product company said Wednesday in a security bulletin.
In all, the company patched 22 vulnerabilities, with the last one rated “high,” it said in the bulletin.
Three of the vulnerabilities had a Common Vulnerability Scoring System rating of 10 out of 10. Each of them would allow a hacker to access privileges on the device or application.
All but one of the 22 vulnerabilities affect the UniFi line of products. The three maximum-security vulnerabilities are CVE-2026-77537, CVE-2026-77550 and CVE-2026-77554.
In all three, hackers could exploit an improper access control vulnerability, the same kind in seven of the total vulnerabilities Ubiquiti disclosed Wednesday. Other vulnerabilities would allow hackers to do things like bypass authentication or run arbitrary commands.
