VDB

CVE-2026-50746

CVE-2026-50746 PUBLISHED CVSS 10 CRITICAL

Reported by hackerone · Published July 2, 2026

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

Risk Scores

CVSS 3.1
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersions
Ubiquiti IncUniFi Connect Application0
Ubiquiti IncUniFi Connect Application0

Timeline

  • Jul 2, 2026 CVE Published
  • Jul 2, 2026 CVE Updated
  • Jul 3, 2026 EPSS Score
  • Jul 4, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›