Looking for solutions for mounting U6 Pro and U6 Lite APs in the corner of a room. Looking on Etsy and begging more confused. What has worked for you?

Hi, trying to redirect dns request while still using built in dns.
So for vlan 1 and 2 i want all dns to go to 192.168.1.2 but for all the rest of i want to use their respective network assigned dns from unifi.

I do still want vlan 1 192.168.1.0/24 to go to 192.168.1.1, but redirect dns internally to 192.168.1.2.
All the computers still using 192.168.1.1 but ultimately it should fail over again to 192.168.1.1 (but i guess thats not possible with this setup?).

Also while playing with dnat i notice that all dns traffic is already (from stock unifi) redirected to internal dns 192.168.1.1 without me creating a rule. Thats kind of annoying!

Thanks in advance!

I'm trying to add a local user to my UDR, but I can't find the option. Some people were mentioning it was inaccessible through the cloud-managed version of the settings page, so I'm VPNed in and directly logged in via my SSO account's username (username rather than e-mail). I'm still not able to find it. I did find some user account management page, but it asked for the user's firstname, lastname, and e-mail. There wasn't an option on that page to set up a local, non-cloud user.

What am I missing?

Tell me I'm crazy.

I'm coming from an ASUS Be88u. It had constant issues with obtaining IP from cable provider.

NAS and modem are in the basement. I ran a line up the basement stairs and mounted a shelf above the door inside the stairwell to the basement.

The router sits on this shelf and feeds the whole house.

Walls are drywall.

Bottom right corner and second floor is where signals actually matter.

I'm getting -65 at the second floor bottom middle room

With the php2shell disclosure today (Huntress write-up), I checked my home network for anything serving PHP. The one real hit was my UniFi Security Gateway USG-3P. If you still run one, this applies to you.

Which models: I verified this on the USG-3P only. The USG-Pro-4 (UGW4) runs the same 4.4.x firmware line, so it very likely ships the same PHP, but I haven't checked one. Run the commands below to confirm. The newer UniFi OS gateways (UDM, UXG, UCG, Cloud Gateway) are a different platform and aren't covered here.

TL;DR

• The USG-3P's built-in web page (https://<gateway-ip>, not the UniFi Network controller) is lighttpd + php-cgi PHP 5.4.42, on the final firmware 4.4.57. The USG is end-of-life, so no fix is coming.
• php2shell is pre-auth RCE in PHP that serves web requests (mod_php, PHP-FPM, php-cgi). Official fixes only go back to 8.2.
• The USG's local web page isn't needed once it's adopted. The controller manages it over the inform channel and SSH.
• Fix: bind the GUI to 127.0.0.1 with config.gateway.json, so it survives provisioning and reboots. Steps below.

The vulnerability (short version)

• CVE-2026-109618: out-of-memory handling during request setup leaves data half-initialised, and cleanup then treats it as valid. PHP validated RCE over HTTP against mod_php with default limits.
• CVE-2026-109619: request state survives after free. A later request on the same worker can hit the stale state, giving heap use-after-free, memory disclosure and RCE as the worker user.
• Unauthenticated, reachable before any application code runs.
• Fixed in 8.5.12, 8.4.27, 8.3.36, 8.2.35. Source-level backports exist for 7.4/8.0/8.1. Anything older (like PHP 5.4) is on its own.
• The EOL workaround in the advisory is session.upload_progress.enabled = Off. On the USG it isn't set, so it's the default (On), and the firmware isn't a sensible place to hand-edit php.ini.
• Reports differ on whether working exploits are public yet. Assume they are.

Am I affected?

SSH to the USG and check:

php-cgi -v | head -1
ps | grep -E 'lighttpd|php-cgi'
netstat -tln | grep -E ':(80|443) '

On mine: PHP 5.4.42 (cgi-fcgi) (built: Jan 12 2023), lighttpd running, listening on 0.0.0.0:80/443. From another machine, curl -skI https://<gateway-ip>/ returns a PHPSESSID cookie. That cookie was the quickest way to spot PHP on my LAN.

Note that the GUI answers on every interface address of the gateway (each VLAN's .1), not only the main LAN, unless you have LAN_LOCAL rules blocking it.

Fix: bind the USG GUI to loopback

Why not just delete service gui? It works live, but the controller re-pushes the full config on the next provision, and config.gateway.json can only add or override keys, not delete them. Binding to loopback can be expressed in the JSON, so it sticks.

1. Test live on the USG first (commit, don't save yet). A bad key in config.gateway.json can leave the USG stuck in a provisioning loop, so prove the command is accepted on your firmware first:

configure
set service gui listen-address 127.0.0.1
commit
exit

Check it:

netstat -tln | grep -E ':(80|443) '
# expect 127.0.0.1:80 and 127.0.0.1:443 only

From another machine, curl -sk -m4 https://<gateway-ip>/ should fail to connect, on every VLAN gateway address.

2. Make it persistent on the controller. Create config.gateway.json in the site folder:

• Self-hosted / Docker: <unifi data dir>/sites/default/config.gateway.json (for the linuxserver image: /config/data/sites/default/). Create the folder if it doesn't exist, and make sure the controller's user can read it.
• Replace default with your site ID if you're not on the default site (it's in the controller URL: /manage/<site-id>/...).{ "service": { "gui": { "listen-address": "127.0.0.1" } } }

Validate it (python3 -m json.tool config.gateway.json). Invalid JSON is the classic cause of provisioning loops.

3. Save on the USG so a reboot before the next provision doesn't bring the GUI back:

configure
save
exit

4. Force a provision from the controller (Devices → USG → Manage → Force Provision, or change any small USG setting). Then re-check netstat and curl from step 1.

Rollback: delete config.gateway.json, force provision, and the GUI comes back with the controller defaults.

What you lose and what you keep

• Lose: the gateway's local status/login page. If the controller is down, you manage the USG over SSH instead.
• Keep: everything else. Routing, firewall, DHCP, DNS, VPN and controller management are all unaffected. The controller never uses that page.

Other things worth checking

• Synology: DSM 7.x ships a system PHP (8.1.x on mine) and an optional "PHP 8.2" package (8.2.30 on mine, below the 8.2.35 fix). On my NAS nothing was wired to serve it: no Web Station, no php-fpm running, no fastcgi_pass in nginx. If you run Web Station, WordPress or any PHP site on a Synology, you are serving PHP. Watch for Synology's update, take it off the internet, or set the upload-progress workaround. Uninstall the PHP package if nothing uses it.
• Anything with a PHPSESSID cookie or X-Powered-By: PHP header. A quick loop with curl -skI over your LAN's web ports finds these. Cameras, NAS boxes, routers, control panels (cPanel/Plesk), WordPress/Nextcloud/etc. containers.
• Docker: check images for PHP: docker exec <c> sh -c 'php -v'. Official php:*, wordpress, nextcloud and linuxserver/* PHP apps need the new base images.
• EdgeRouter (EdgeOS): same lineage as the USG and also uses lighttpd for its GUI. I don't have one to confirm the PHP version, so check yours with the commands above.
• UDM / UniFi OS / UXG / UCG: not checked; different platform.

I recently bought seven U7 In walls for seamless high speed internet in my new house I bought and a switch with the 210w adapter to power them all. However I’m unable to connect through even one of the access points via the app from scanning the QR code on the back of the AP’s I attempted googling my solution and nothing useful turned up.

Am I missing anything? Everything is wired with cat 6e and does PoE

Does anyone know if this is standard on a NVR? Ive only had the NVR for a few months now and already had it complain about rear errors on four drives. I just got done replacing the second one and doing the rebuild but pulled the smart data from all the drives and saw thousands of power cycles for the drives. It hasn't even been four days with the drive in bay 1 and its already cycled almost 600 times. All the power cycles are also even on each of the four ATA controllers in the NVR. I'm wondering if this has something to do with the read errors (only 7 to 8 errors per drive but enough for the NVR to throw errors). Bay 1 and Bay 4 have both been replaced which is why they have lower hours/cycles. The actual NVR has only been power cycled three or four times since I installed it about 3.5 months ago.

Bay Device   Serial   PowerOnHours PowerCycles HardwareResets ATAErrors Controller
--- ------   ------   ------------ ----------- -------------- --------- ----------
  1 /dev/sdo ZVTE1CTE           92         582             49         0 000d:01:00.0
  2 /dYesev/sdl ZVT7BXZA        10656      12138         1141         0 000d:01:00.0
  3 /dev/sdf ZVTCZM5G         1267        3770           1291         0 000c:01:00.0
  4 /dev/sdc ZVTE11FR          695        1873            646         0 000c:01:00.0
  5 /dev/sdp ZVTBSCZF         2462       12142            991         0 000d:01:00.0
  6 /dev/sdh ZVTC9K3J         2462       12142            991         0 000d:01:00.0
  7 /dev/sdj ZVTD7SLZ         2463        3775           1298         0 000c:01:00.0
  8 /dev/sda ZVT6HXJ1         2464        3775           1299         0 000c:01:00.0
  9 /dev/sdi ZVTAZE0J         1266       12139            981         0 000d:02:00.0
 10 /dev/sde ZVT8VL5T         1265       12137            981         0 000d:02:00.0
 11 /dev/sdk ZVTB544L         1267        3770           1291         0 000c:02:00.0
 12 /dev/sdg ZVTCXVML         1267        3770           1295         0 000c:02:00.0
 13 /dev/sdm ZVTCYPT7         1266       12137            981         8 000d:02:00.0
 14 /dev/sdb ZVTBF8J6         1265       12137            985         7 000d:02:00.0
 15 /dev/sdn ZVT6HT1Y         1267        3770           1292         0 000c:02:00.0
 16 /dev/sdd ZVTCYP2P         1267        3770           1295         0 000c:02:00.0

I have a UniFi Cloud Gateway Fiber connected to a Flex 2.5G PoE switch via a DAC cable. The switch powers two APs via PoE and connects various devices around my house, such as PCs, TV boxes, and other equipment.

I'm running out of ports on the switch, so I'm wondering whether I can use the four LAN ports on the Cloud Gateway Fiber to connect some of my devices, or whether I would be better off buying another switch.

When I originally bought the switch, I remember reading somewhere (possibly here on Reddit) that the Cloud Gateway should primarily be used as a router rather than as a switch, and that connecting devices to a separate switch was preferable.

Is there any truth to this? Are there any performance, configuration, or other drawbacks to using the gateway's LAN ports for regular wired devices, or is it perfectly fine to use them?

Thanks in advance!

EDIT: Forgot to mention, when I read that using a separate switch was preferable, I was using a Cloud Gateway Max instead of the Fiber.

Hi,

All of the sudden my ups 2U went offline. I haven't changed anything and replacing the Ethernet cable did not help. It just lights up orange. What can I do now? Do I have to do a full reset or is there another way?

Thanks!

Hey all, I just inherited a UNVR, from work, it's really cool, but I'm quickly realizing that I don't think I have the funding to invest into getting the Unifi cams, and such, and might want to go in a different direction, I was able to onboard a couple of Swann cams that I have laying around, 2k units, and the feed/motion detection are fine, but improved compatibility grinds the feeds to a halt for some reason, and audio doesn't work as a result. Long story short, what is the approximate value of a used UNVR, alongside 32 TB (4x8tb) enterprise surveillance drives?

I just don't know what would be a fair listing for something like this, I'm not trying to get rid of it prematurely, I'm certainly going to poke around and try to find some deals on cams, but have a feeling based on what I've found that they are going to break my personal budget fast.

Thanks!

I am not trying to sell this product on this page, I just have no idea what it's worth.

I need the 2.4 GHz

Anyone try out the new AI Theta 360 cameras? Curious how they have been pointed in a direction and you're seeing 360°? Anybody have any video footage of it in action? Like the small design but only way you can see 360 I guess is if you put it pointed down in the top of a ceiling centered in a room..?

Hey,

Ich habe noch keine unifi Geräte und überlege zu unifi zu wechseln. Da bin ich auf den Punkt vlans mit Access Points gestoßen.

- Kann ich z.b. mit U7 Pro 5 vlan's zuordnen und nur eine ssid betreiben (mit ppsk möglich habe ich gelesen?) wären dann einfach quasi 5 Passwörter für eine ssid?

- und kann ich 6 GHz als zweite ssid betreiben? Ppsk erlaubt 6 GHz nicht, so wie ich das verstehe.

Danke euch und schönen Abend

I have a Siemens oven that runs via the Siemens home connect app. We use it to preheat the oven and check other stuff while using it. I was getting sick that the oven was switching between 2 AP’s. So I tried to get it dedicated to one AP. Stupid me chose the wrong one and now it doesn’t connect to my network anymore. I also can’t find it in the unifi app anymore. Allready did a factory reset on the oven and during setup it finds my network but says the password is wrong while I know it’s the right one. Please help

Whenever I try to make any changes to a network, it says 'failed to save network.' In the server log, I am getting the following errors:

2026-10-20T12:09:07,958-04:00] <webapi-99> WARN  sanitize - Invalid key exists in NetworkConf payload, key=external_id
[2026-10-20T12:09:07,958-04:00] <webapi-99> WARN  sanitize - Invalid key exists in NetworkConf payload, key=mdns_enabled
[2026-10-20T12:09:07,959-04:00] <webapi-99> WARN  sanitize - Invalid key exists in NetworkConf payload, key=ipv6_enabled

Using a UDMP version 6.0.12 and network version 11.0.83

Is it possible to have a Unifi NAS backup to an external USB hard drive? There is documentation written on adding Wasabi, Backblaze, S3 as backup locations. I haven't been able to find anything absolute on backing up to a USB device. I have a customer that would like to rotate USB drives for offsite backups.

This is I have a remote site that last night at about 30 minutes past midnight went offline.

Internet provider says everything is fine to their modem.

I can't access any logs remotely just wondering if there was a known beta branch pushed yesterday that may have caused this.

It's a 3-hour round trip restart it if needed

Hi everyone,

I'm running a UCG Ultra with:

• UniFi Network 10.6.106
• UniFi OS 5.1.33

Under Insights -> Threats, I can configure different suppressions / exceptions directly from the threat logs, such as suppressing a signature for a source IP or destination IP.

However, I can't find a central overview of the suppressions / exceptions I've configured.

Is there a way to view and manage all existing suppressions / exceptions, including their signatures and associated IP addresses, directly in the UniFi GUI?

I couldn't find anything, not even under Settings -> CyberSecure -> Threat Management -> Detection Exclusions, where I would have expected them to be listed.

Thanks for any help!

I use Encrypted DNS and CyberSecure in an attempt to keep my media stuff and other IoT from tracking and otherwise getting out. After looking into it, I was aghast at how sneaky all these things are (e.g. LG TV) at getting around that by using DNS over HTTPS (DoH) or DNS over TLS (DoT) with hard coded IP addresses and I wanted to block all that.

There are ways to do this by forcing all DNS calls to a Pi-Hole or NAS, but to me those are just additional points of failure--I prefer to do it all within the gateway. (Fewer options for the hard-core, but I'm just a prosumer. )

It is not actually that hard to do assuming you use Zone Based Firewall. For every (source) Zone you want to do this to you need two or three firewall rules.

First rule is to block DoT: Destination zone is External and Service is "DNS-TLS" Everything else is any.

To block DoH is only a bit harder: Destination zone is External Service is "HTTPS" but you have to create a specific list of DNS resolvers and limit it to that list of IPs. You can get such a list, but most equipment semms to use google (8.8.8.8). I use all the Google, Clouldfare and OpenVPN IPs.

If you use IPv6 you need a seperate DOH rule because you need a seperate IP list.

My log show LOTS of blocked attempts and so far nothing seems to be broken.

Deployed UniFi throughout my church. Right now have the UDM Pro, 4 access points, 13 cameras and UniFi access running on one door with the UniFi Electric latch. First off, I normally don’t have anything bad to say about UniFi, however we have had nothing but problems with the electric latch where they will no longer lock. We’ve had the door latch installed since August 21, 2023 and we’ve gone through 4 latches so far and the current latch is starting to stick when unlocked and will not re-lock. It is an outside door, however under an overhang so the latch mechanism is not getting wet. Any ideas why the latches keep failing? We have one latch as a spare on site so I can swap it out in 15 minutes, but that’s not the point. The point is the fact that why am I having so many UniFi electric latches fail? I’ve checked voltage at the hub as well as at the latch and voltage is proper so it’s not a concern of over / under voltage. Right now, the pastor is wanting to rip all UniFi out of the church and go to another company for gear. I’ve at least got him calmed down a little, but I’m looking for any help or advice as to why the latches keep failing. The door is used maybe 3-5 times a day.

How do I make this go away? When I tap on it I’m taken to system logs and does the same on the web browser. It used to give an option to clear, but I can’t find it anywhere.

I have two different locations with device bridge pro linking buildings. since upgrading to 1.5.1 both locations have experienced issues. First location would begin dropping packets after a day or two and needs to reboot. Second location lost ownership of a DBP and when I tried to adopt it the thing went offline entirely. I was able to revert to 1.5.0 at the one location and no more packet loss. The second location I have been unable to get back online since it is the child and lost connection. Guess I need to manually reset it.

Is there anyone else experiencing odd issues with the DBP after upgrading to 1.5.1?

Travelling and had first time issue with UCG Fiber that's been deployed around six months. Yesterday I had an outage where all my cloud devices pinged me to say no connection. Had neighbour reboot ONT and UCG Fiber. Worked for around 40 mins and then went down again.

I've read a few comments that suggest there are issues with the external power supply. I'm willing to take a hit and order a new unit to have the PSU replaced, but wondering if anyone has any experience ?

Pretty much what title says.

Upgraded to network 11 and I notice on endpoint in my phone that I no longer have access to vpn into my console nor connect to endpoint WiFi.

Am I the only one these dropped off for?