CVE-2026-50746
Public exploit code is available. Proof-of-concept or working exploit code for CVE-2026-50746 is indexed in GitHub PoC. Expect opportunistic scanning and exploitation attempts — prioritize remediation even though it is not (yet) in the CISA KEV catalog.
An attacker can exploit multiple vulnerabilities in Ubiquiti UniFi to execute arbitrary code, conduct an SQL injection attack, escalate privileges, bypass security measures, conduct a denial of service attack, manipulate data, and disclose information.
CSIRTS triage
- What
- Multiple vulnerabilities can allow arbitrary code execution, SQL injection, privilege escalation, and more.
- Who is affected
- Deployments of Ubiquiti UniFi.
- Urgency
- Remediation is urgent due to the high severity and potential for exploitation.
- Action
- Apply the latest security updates for Ubiquiti UniFi.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-50746
Get an email if CVE-2026-50746 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.83% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 53% of all EPSS-scored CVEs.
Exploit availability
Public exploit or proof-of-concept code for CVE-2026-50746 is indexed in these free datasets. Available exploit code raises real-world risk independent of the CVSS score.
- GitHub PoCPublic proof-of-concept repositories on GitHub reference this CVE.look it up ↗
Advisory coverage (3)
- unknownNCSC-2026-0221 [1.00] [M/H] Vulnerabilities fixed in UniFi products from Ubiquiti Networksncsc-nl · 2026-07-07
- high[UPDATE] [high] Ubiquiti UniFi: Multiple vulnerabilitiescert-bund · 2026-07-03
- criticalCVE-2026-50746: A malicious actor with access to the network could exploit an Improper Access Control vulnerab…nvd · 2026-07-02
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-50746)