Ubiquiti UniFi critical flaw (Bulletin 066)
Critical vulnerability in Ubiquiti UniFi products covered by Security Advisory Bulletin 066. CVSS 9.9. Part of a seven-CVE release batch headlined by a CVSS 10.0 command injection in UniFi Connect. Patch to 3.4.20 or later.
- Vendor
- Ubiquiti
- Product
- UniFi (see Bulletin 066 for affected versions)
- CVSS
- 9.9
- EPSS (exploit probability)
- 1.6%
- Status
- patched
- Published
Is CVE-2026-50748 being exploited?
Not on any exploited-vulnerability catalog we track. CVE-2026-50748 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-10-21 snapshot. That can change quickly; check the write-up below for the latest reporting.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 1.6% (scored October 14, 2026).
- CISA KEV[ — ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-21. Full cross-catalog view: /kev-comparison
CVE-2026-50748 is a CVSS 9.9 critical vulnerability in Ubiquiti UniFi products, disclosed in Security Advisory Bulletin 066 alongside six other critical CVEs. The lead issue in that bulletin is CVE-2026-50746 (CVSS 10.0, command injection in UniFi Connect ≤3.4.16), fixed in UniFi Connect 3.4.20.
For authoritative affected-version details and patch guidance, see the NVD record and Ubiquiti’s Bulletin 066.
No confirmed exploitation in the wild as of publication. Not on CISA KEV at time of writing.
Full coverage: Ubiquiti Patches Max-Severity UniFi Connect Command Injection.
Other Ubiquiti CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-77554 UniFi Talk command injection — unauthenticated remote code executionwrite-up | [ CRITICAL ] | 10.0 | 1.6% | — |
| CVE-2026-77550 UniFi OS CRLF injection — authentication bypasswrite-up | [ CRITICAL ] | 10.0 | 0.8% | — |
| CVE-2026-77537 UniFi Protect Application improper input validation — unauthenticated RCEwrite-up | [ CRITICAL ] | 10.0 | 1.6% | — |
| CVE-2026-54400 Ubiquiti UniFi Access improper access control (Bulletin 066)write-up | [ CRITICAL ] | 9.1 | 0.5% | — |
| CVE-2026-50747 Ubiquiti UniFi critical flaw (Bulletin 066)write-up | [ CRITICAL ] | 9.9 | 0.5% | — |
| CVE-2026-50746 Ubiquiti UniFi Connect command injection (Bulletin 066)write-up | [ CRITICAL ] | 10.0 | 1.7% | — |
| CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability | [ CRITICAL ] | 10.0 | 45.8% | |
| CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability | [ CRITICAL ] | 10.0 | 1.8% |
