Critical vulnerabilities in Ubiquiti UniFi products require immediate patching (heise.de)

• 25 vulnerabilities in Ubiquiti UniFi products, several critical (CVSS 9.0-10.0)
• CVE-2026-50746 (CVSS 10.0) in UniFi Connect allows command injection
• Affects: UniFi OS, Access, Connect, Network, Protect, Protect Floodlight, Talk
• Patches available; immediate installation advised

"Ubiquiti released updates addressing 25 security vulnerabilities in multiple UniFi products, including several rated critical (CVSS 9.0-10.0). Attackers can exploit these remotely for command injection, authentication bypass, and privilege escalation. Affected products: UniFi OS, Access, Connect, Network, Protect, Protect Floodlight, and UniFi Talk. Administrators should apply patches urgently, as similar vulnerabilities were actively exploited in June 2026."