GoKawiilUbiquiti fixes three critical flaws in UniFi Protect, Talk and OS platforms
Ubiquiti released patches for three maximum-severity vulnerabilities affecting UniFi Protect, UniFi Talk, and UniFi OS Server products. The flaws include an input validation bug in Protect, a CRLF injection issue in UniFi OS that allows authentication bypass, and a command injection vulnerability in the Talk VoIP application, all exploitable remotely without authentication or user interaction.
GoKawiil's interpretation of the reporting above, not reported fact.
These bugs come just days after Ubiquiti patched 18 other critical issues across its product line, showing a pattern of severe flaws in widely deployed network gear. With over 100,000 UniFi OS instances visible online according to Censys, unpatched systems present a large attack surface for low-complexity remote exploitation.
- Three CVEs affect UniFi Protect, UniFi Talk, and UniFi OS Server with maximum severity ratings
- Exploits require no authentication or user interaction, making them easy to weaponize
- Over 100,000 exposed UniFi OS instances remain a potential target pool despite unclear patch status
Ubiquiti UniFi Dream Machine SE — If you're running UniFi Protect or Talk, the Dream Machine SE is the all-in-one console that hosts them and makes applying UniFi OS updates like these patches a couple of clicks away. It combines routing, switching with PoE, and network management in one rack-mountable box, so your cameras and phones stay on a single, easily updated platform.
See Ubiquiti UniFi Dream Machine SE on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-26
Published there as: “Ubiquiti patches three max severity security vulnerabilities”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.