hacker-news Jul 8, 2026 · Crawled Jul 8, 2026

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

1 Malware

AI Summary

Ubiquiti has patched multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, Talk, Access, Protect, and OS. The flaws include command injection, SQL injection, SSRF, and improper access control issues that could allow privilege escalation and arbitrary command execution. While most vulnerabilities have not been observed in active exploitation, CISA has flagged three UniFi OS flaws as weaponized in real-world attacks. Additionally, Russian state-sponsored actors have previously used compromised Ubiquiti devices in the MooBot botnet.

AI-extracted · verify before operational use

Extracted Entities 1 found

Malware MooBot →

MITRE ATT&CK TTPs 4 techniques

T1059.001 PowerShell · Execution T1068 Exploitation for Privilege Escalation · Privilege Escalation T1133 External Remote Services · Persistence T1190 Exploit Public-Facing Application · Initial Access