Vulnerability intelligence
CVE-2026-50746
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.
CVSS Score
10
Critical
EPSS — Exploit Probability
1.7%
Riskier than 76% of all CVEs · checked 2026-10-05
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
3 articles across 3 outlets · first covered Jul 7, 2026 · latest Jul 8, 2026
Coverage timeline
-
Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746securityaffairs.com · Jul 8, 2026
-
Ubiquiti patches critical command injection flaw in UniFi Connectsocradar.io · Jul 8, 2026
-
Ubiquiti fixes critical UniFi Connect app RCE flawsecurityonline.info · Jul 7, 2026