Vulnerability intelligence
CVE-2026-50746
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.
CVSS Score
10
Critical
EPSS — Exploit Probability
2.5%
Riskier than 83% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
3 articles across 3 outlets · first covered Jul 7, 2026 · latest Jul 8, 2026
Tracked incidents
Coverage timeline
-
Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746securityaffairs.com · Jul 8, 2026
-
Ubiquiti patches critical command injection flaw in UniFi Connectsocradar.io · Jul 8, 2026
-
Ubiquiti fixes critical UniFi Connect app RCE flawsecurityonline.info · Jul 7, 2026