Ubiquiti Patches Critical Uni Fi Flaws Across Connect, Talk, Access, Protect, and OS
Summary: Ubiquiti released updates for critical flaws in UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could allow privilege escalation and arbitrary command execution. The article states there is no evidence the flaws have been exploited in the wild, but notes that three UniFi OS vulnerabilities (CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910) were flagged by CISA as weaponized in real-world attacks last month.
What's compelling: CISA has already recorded real-world exploitation of three of these UniFi OS flaws, and Russian state-sponsored actors have previously conscripted compromised Ubiquiti Edge OS routers into the MooBot proxy botnet, so unpatched UniFi gear has a track record of being put to work against its owners.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2026-34908CVE-2026-34909CVE-2026-34910
- Related