CVE Tools
Back to feed
Patch released UniFi Protect rce UniFi OS Ubiquiti auth-bypass

Ubiquiti patches three max severity security vulnerabilities

BleepingComputer·By Sergiu Gatlan··2 min read
CVE Tools coverage

Ubiquiti has issued security updates for its UniFi Protect, UniFi OS, and UniFi Talk products to remediate three newly disclosed maximum-severity vulnerabilities. These flaws, tracked as CVE-2026-77537, CVE-2026-77550, and CVE-2026-77554, allow remote attackers to execute unauthorized actions without requiring prior authentication or user interaction. Administrators should upgrade to UniFi Protect Application version 7.2.105 or later, UniFi Talk Application version 5.3.2 or later, or UniFi OS Server version 5.1.21 or earlier to mitigate these risks.