Ubiquiti security advisory (AV26-850)
Canada's Cyber Centre reports critical vulnerabilities across Ubiquiti UniFi products including UniFi OS Server, Network, Protect, and Access; updates required.
The Canadian Centre for Cyber Security (AV26-850) reports critical vulnerabilities affecting numerous Ubiquiti products, including UniFi OS Server (<=5.1.21), UniFi Network Application (<=10.4.57), UniFi Protect Application (<=7.1.87), and UniFi Access Application (<=4.3.3). Other affected products include UniFi Connect, UID Enterprise Agent, UniFi Talk, UniFi Protect AI Key, Connect Display Cast Pro, and Enterprise Audio/Video Bridge. Administrators should update affected applications and devices; the advisory lists no CVE ids or exploitation details.
- Critical vulnerabilities affect UniFi OS Server 5.1.21 and below plus many UniFi applications
- Affected products include Network, Protect, Access, Connect, Talk, and Protect AI Key
- Canadian Cyber Centre urges users to apply available updates
Serial Number: AV26-850 Date: August 26, 2026 As of August 26, 2026, Ubiquiti is affected by critical vulnerabilities in the following products: UniFi OS Server Prior to or equal to 5.1.21 UniFi Connect Application Prior to or equal to 3.24.20 UniFi Network Application Prior to or equal to 10.4.57 UID Enterprise Agent Prior to or equal to 1.61.8 UniFi Access Application Prior to or equal to 4.3.3 UniFi Protect Application Prior to or equal to 7.1.87 UniFi Connect Display Cast Pro Prior to or equal to 1.0.108 UniFi Enterprise Audio/Video Bridge Prior to or equal to 1.0.10 UniFi Talk Application Prior to or equal to 5.2.7 UniFi Protect AI Key Prior to or equal to 2.1.3 The Cyber Centre…
This source does not provide full text. Read it at cyber.gc.ca.