Critical Command‑Injection Vulnerability (CVE‑2026‑50746) Discovered in Ubiquiti UniFi Connect Application
What Happened – Ubiquiti disclosed seven critical flaws in UniFi OS, the most severe being CVE‑2026‑50746 in the UniFi Connect application (≤ v3.4.16). The flaw allows an attacker with network access to bypass access controls and execute arbitrary commands on the host device. Six additional CVEs (CVE‑2026‑50747, ‑50748, ‑54400, ‑54402, ‑55115, ‑55116) affect UniFi Talk, Access, Protect, routers, gateways and NAS devices.
Why It Matters for Compliance & Audit Readiness
- The vulnerability directly tests the Access Control and Change Management controls that SOC 2 CC6.1 and CC6.2 require you to monitor and evidence.
- Continuous evidence of patch‑management and configuration‑baseline verification is essential to demonstrate due‑diligence during a SOC 2 audit.
- Mapping this flaw to your control library helps you produce defensible audit artifacts (e.g., patch‑deployment logs, configuration drift reports) that Verisq’s Control‑Mapping capability can automatically collect.
Who Is Affected – Enterprises that deploy Ubiquiti UniFi OS for building‑automation, Wi‑Fi, surveillance, or edge routing – spanning technology/SaaS, retail, manufacturing, education, and government environments.
Recommended Actions
- Verify inventory of all UniFi OS devices and confirm firmware version.
- Apply the Ubiquiti‑provided updates (UniFi Connect ≥ v3.4.20; other apps to latest releases).
- Record patch‑deployment dates and configuration snapshots in a centralized compliance repository for SOC 2 evidence.
- Enable network‑segmentation and restrict management‑plane access to trusted subnets.
Source: BleepingComputer
Technical Notes – CVE‑2026‑50746 is an Improper Access Control → Command Injection (CVSS ≈ 9.8). Exploitable without user interaction; low‑complexity attacks. Other CVEs are similar low‑complexity command‑injection or remote‑code‑execution flaws across UniFi Talk, Access, Protect, and router firmware. Censys reports > 100 k UniFi OS instances exposed, ~50 k in the U.S.