Patch released UniFi Protect rce UniFi OS Ubiquiti auth-bypass
Ubiquiti patches three max severity security vulnerabilities
CVE Tools coverage
Ubiquiti has issued security updates for its UniFi Protect, UniFi OS, and UniFi Talk products to remediate three newly disclosed maximum-severity vulnerabilities. These flaws, tracked as CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554, allow remote attackers to execute unauthorized actions without requiring prior authentication or user interaction. Administrators should upgrade to UniFi Protect Application version 7.2.105 or later, UniFi Talk Application version 5.3.2 or later, or UniFi OS Server version 5.1.21 or earlier to mitigate these risks.