Ubiquiti Patches UniFi Flaws That Could Lead to Full System Takeover

Recently, Ubiquiti released patches for a few new bugs found in its UniFi Network app. One of them is a really nasty one, a CVSS score of 10.0 bug that can let attackers take over the whole system. If you use UniFi to control your gateways, switches, and access points, this kind of advice needs to be dealt with right away by your IT and security teams.

This is important because UniFi Network is not a weird little add-on that is only used in a lab. A lot of businesses use this real management layer to set up and keep an eye on their basic network kit. It could also have a much bigger effect than a normal application bug when updates aren’t made to the control plane. 

One of the system’s flaws can be used against anyone, without them having to log in or interact with it. This obviously causes a lot of problems for everything that is connected to the internet.

The more serious problem is CVE-2026-22557, a path traversal bug in the UniFi Network Application that lets someone who isn’t supposed to be there get to sensitive data on the system underneath. Once that happens, they can pretty much do whatever they want with them. 

A second flaw raises the stakes

The second vulnerability, CVE-2026-22558, is an authenticated NoSQL injection weakness. It has a CVSS score of 7.7. It needs to be given access first, but once an attacker is inside, it can be used to give more access. But organizations shouldn’t throw it out just because it doesn’t get a perfect score. When an attacker gets into a system through phishing, reused passwords, or weak internal controls, they often use lower-tier access.

When you put the two flaws together, they make a terrible picture. One fault might open the door. Once inside, the other can assist an assailant in moving upward. The authenticated flaw counts in shared admin environments, MSP configurations, and any network where internal trust is too lax even if a team thinks its UniFi interface is not generally exposed.

The patch window should be short

This warning says that the following UniFi products are at risk: UNIFI Network Application v10.1.85 and earlier versions, Release Candidate 10.2.93 and earlier versions, and UniFi Express running Network App 9.0.114 and earlier versions. If you are a system administrator, Ubiquiti says you should update to v10.1.89 or higher, 10.2.97 or higher for the RC branch, and UniFi Express firmware 4.0.13 or higher, which includes Network App 9.0.118 or higher.

To sum up, apply the patch now and then make sure that the UniFi management interface is locked down so that it can’t be accessed from the internet or any other place it shouldn’t be. It’s important to drop everything and update, according to both Ubiquiti’s advisory and some third-party alerts. This shouldn’t be put off until the next maintenance window.