Ubiquiti security advisory (AV26-850)
Serial Number: AV26-850 Date: August 26, 2026 As of August 26, 2026, Ubiquiti is affected by critical vulnerabilities in the following products: UniFi OS Server Prior to or equal to 5.1.21 UniFi Connect Application Prior to or equal to 3.24.20 UniFi Network Application Prior to or equal to 10.4.57 UID Enterprise Agent Prior to or equal to 1.61.8 UniFi Access Application Prior to or equal to 4.3.3 UniFi Protect Application Prior to or equal to 7.1.87 UniFi Connect Display Cast Pro Prior to or equal to 1.0.108 UniFi Enterprise Audio/Video Bridge Prior to or equal to 1.0.10 UniFi Talk Application Prior to or equal to 5.2.7 UniFi Protect AI Key Prior to or equal to 2.1.3 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Ubiquiti UniFi - Security Advisory Bulletin 067
CSIRTS triage
- What
- Multiple critical vulnerabilities affecting Ubiquiti UniFi ecosystem products including OS Server, Network Application, Protect, Access, and Talk.
- Who is affected
- Ubiquiti UniFi deployments running the specified vulnerable versions across enterprise and small business networks.
- Urgency
- Critical based on severity designation; no active exploitation reported yet.
- Action
- Review Ubiquiti UniFi Security Advisory Bulletin 067 and upgrade affected products to versions newer than those specified.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch UniFi
Get an email when a new UniFi advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/ubiquiti-security-advisory-av26-850
More from Canadian Centre for Cyber Security
- unknownFortra security advisory (AV26-906)2026-09-10
- unknownPalo Alto Networks security advisory (AV26-905)2026-09-10
- unknownAL26-019 - Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway - CVE-2026-19490 and CVE-2026-…2026-09-09
- unknownCitrix security advisory (AV26-833) - Update 12026-09-09
- criticalCisco security advisory (AV26-197) – Update 32026-09-09