CVE Catalog
CVE-2026-50746
CriticalCVSS 10.0Exploitation Probability (EPSS)
High risk2.51%
83th percentile - higher than 83% of all known CVEs
Summary
A vulnerability in the UniFi Connect application allows an attacker with network access to execute command injection on the host device due to improper access control.
Risk Assessment
An attacker can take control of the device, compromising confidentiality, integrity, and availability, and potentially spreading the attack across the network.
Recommendation
Immediately update the UniFi Connect application to the latest version and restrict network access to trusted hosts only.
Original NVD description (English source)
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.