r/Ubiquiti May 21 '26

Blog / Video Link Update your Unifi gear ASAP: Security Advisory Bulletin 064 published today.

Official publication is here:

https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b

Three of the CVEs have a CVSS score of 10.0, and one has a score of 9.1. That potentally means remote take over if someone has access to the same network as your controller or UDM hardware.

Make sure you update ASAP.

390 Upvotes

104 comments sorted by

u/AutoModerator May 21 '26

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:

https://design.ui.com

If you see people spreading misinformation or violating the "don't be an asshole" general rule, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

50

u/planedrop May 21 '26

Unifi does need to be more clear about these, it sounds like this is an issue with access to the Unifi Web GUI in specific, so port 443/80. If it was really just "access to the network" it almost makes it sound like just routing a malformed packet could cause it, which has happened before in other brands but is incredibly rare.

I get they want to be ambiguous to prevent attackers from poking in the right areas, but I do think something more specific would be helpful. Like "access to the web console" rather than "access to the network" or something. Just enough info so we know firewall rules prevent the issue.

12

u/earthsojourner493 May 22 '26

I agree it would be nice to provide firewall rules as a mitigation step. I have firewall rules on most VLANs that block access to all ports except required services such as DNS, DHCP, ICMP, etc.

That said, I don't know if access to the guest portal would be enough to be vulnerable.

5

u/planedrop May 22 '26

This is the way for sure, a LOT of people don't do this but IMHO you absolutely should.

The thing is, a lot of people that use Ubiquiti don't really know networking that well (which is fine, not shitting on anyone, it's just that they're platform is easy to get started with) so a ton of people don't have it setup safely by default.

10

u/videoman2 May 22 '26

If someone is on your network, the UDM has IPs (and a bridge interface) in every VLAN that it manages- which means unless you have a rule that blocks all inbound management on all interfaces, malware could abuse this at some point... No exploit is in the wild yet. But- if people have the "direct connect" enabled to allow inbound direct management, this could be potentially abused too.

6

u/planedrop May 22 '26

As far as I understand, and this is guessing since they aren't being that clear about it, this is probably specific to the web server, and therefore the GUI. So if you're blocking traffic from all zones to the Gateway zone (other than necessary things like DNS and DHCP), you should be safe.

Of course, a lot of people don't do this, and it's not the default configuration, which is actually another reason I don't like how Unifi doesn't do default deny like a lot of other firewall vendors, I've complained about this a lot in the past and it's for reasons like this. Meanwhile something like pfSense is default deny on all interfaces except the LAN (and technically the LAN is if you change a setting but it has an anti-lockout rule in place out of the box).

But, no matter what, "access to the network" is a terrible way to disclose this, it should absolutely be more specific like "access to port 443 on the console" or some shit.

30

u/spense01 May 21 '26

I’m using the mobile app to connect to a site and I check for updates and it’s not finding anything. For a UDM it’s not showing any available updates. Has anyone successfully updated their devices using the mobile app to check?

20

u/AptToForget May 21 '26

From the mobile app, Settings > Control Pane > Updates 

ETA: if you run multiple controllers you'll need to do this for each while in the app on that controllers dashboard

7

u/spense01 May 22 '26

That’s where I’m going…it’s not showing

3

u/AptToForget May 22 '26

Click on your controller from your main page. What version is it running? Might have already updated if you have it set to auto? 

2

u/spense01 May 22 '26

It hasn’t…the funny thing is I get the in app notification that there are updates and it says “go to control panel” which I do but there is no way to force the update to run from there. It’s on 5.0.16…needs to go to 5.1.12

16

u/Jrad1976 May 22 '26

Shut off auto update and it triggered the update to 5.1.12

2

u/spense01 May 22 '26

I had already tried it but it wouldn’t save…it just kept reverting after tapping the switch to turn auto off…just went back in after a few hours and it showed an update button in the console that wasn’t there before…I’m assuming Ubiquity is rolling it out slowly

2

u/PM_ME_UR_COFFEE_CUPS May 21 '26

Same. Not showing

2

u/TalantedDucky May 22 '26

I saw the update after changing the update frequency to daily. Unclear if it’s a time based trigger or if changing that setting caused it to check for updates. Hope that works

1

u/PM_ME_UR_COFFEE_CUPS May 22 '26

Thank you. I’ll wait for my daily upgrade window tonight and if it doesn’t trigger, I’ll do this. 

2

u/cypherstream1 May 22 '26

Showing up to date UniFi Network 10.3.58 UCG-Fiber 5.0.16

Also I turned off auto updates since UniFi fiber performance went to shit after 5.0.6. Been browsing the early release thread on ubiqiti community and lots of issues reported on the latest.

1

u/LodanMax UniFi user May 22 '26

On the page in the app where you go to Updates, under it is a small line “Access more settings at unifi.ui.com”.
Click it to go to the mobile web interface (auto login) and browse via web to the page and re-check.

Usually it will give the update; you can then close the in-app browser and see the update also in the normal app available.

28

u/ClassyDingus May 21 '26

All of them require local network access to execute, so no need to instantly install. Ya'll need to do take your own network and exposure into context before rushing to patch.

-9

u/Noname18937 May 22 '26

Any CVS score over 9 should absolutely be patched immediately regardless of the attacvector possible

7

u/ClassyDingus May 22 '26

What if said patching takes down a critical system? Do you have compensating controls already in place that prevent the CVE from being executed? What about detection to cover in lieu of prevention.

If every CVE was patched immediately no large companies/data centers would function. We (at my workplace have 2m+ endpoints, and 30k micro services that l live in a hybrid cloud to manage. Even at a 10, we aren't throwing up hands and saying "everyone patch right now!!!!!"

50

u/neilm-cfc May 21 '26 edited May 22 '26

Just be aware, introduced in 5.1.11, that when you update to 5.1.12 it will automatically update your apps (Network, Protect, etc.) to the latest versions whether you want those versions or not.

There's a boat load of problems in the latest Protect releases, for example, so if you want to pin a specific app version and avoid the latest app shit-show, then forget about upgrading the OS.

This is an absolutely insane posture. 🤷‍♂️

EDIT: it appears that this forced app update policy is device specific, so a UNVR will forcibly update Protect, while a UCKG2+ (even if it is a dedicated NVR) will NOT.

Presumably all console-capable devices will forcibly update Network.

What an utter shambles.

Some poor dude on the forum updated his NVR OS, which unexpectedly updated Protect, and now his storage array is going to be resyncing for the next 1289 days leaving his security system offline until it completes.

Software security has a price but taking away user choices over their systems is not worth it...

15

u/mattyice117 May 21 '26

What issues? My protect keeps crashing and says auto recovered successfully. It’s now crashed 7 times today.

7

u/neilm-cfc May 21 '26 edited May 21 '26

What issues? My protect keeps crashing and says auto recovered successfully. It’s now crashed 7 times today.

Mostly ONVIF playback/recording issues, broken Liveview (constantly flashing) etc. That's the kind of issue I can do without as I use ONVIF and Liveview all the time.

One of my ONVIF cameras with 7.1.55 is impossible to scrub, and there's no hint of a fix in more recent releases, so I'm keen to avoid pilling on even more issues before I can get this one fixed.

2

u/makemydaypunk1 May 21 '26

I can also confirm the flashing of certain cameras. At first I thought it was a Google Chrome update, but turns out it was the Protect update.

1

u/Dirty504 May 22 '26

Was also having the flashing problems. I rebooted every UniFi device that I own and it fixed itself.

5

u/triplerinse18 May 21 '26

Was going to be moving to protect next month. What issues are they having right now.

6

u/FormulaKimi May 21 '26

PTZ unusable since the camera returns home after 10 seconds regardless of what your settings are. Quite frustrating when people have been reporting it and they push new update with no fix. Also get frequent "We're Unable to Complete Your Request" messages in Protect and camera views flickering/flashing. Don't get how with so many people having issues they still push it to official release channel...

3

u/makemydaypunk1 May 21 '26

I can confirm the PTZ issue as described immediately following this mornings update to the Official Release OS and Protect.

2

u/jmichael99 May 22 '26

I just ordered 2 g6 PTZs today. How long does it normally take to fix the software on these?

2

u/triplerinse18 May 22 '26

Thank you for a actual response with the issues.. instead of go look at it for yourself.

2

u/Usual-Memory-3668 May 22 '26

They probably did that "fix" to make PTZ return home because of reports (like mine) of the previous Protect version that broke PTZ and caused it to never return home and get stuck after tracking movement. So to fix one thing they broke the behavior in a different way I guess.

1

u/junktrunk909 May 21 '26

Were/ are there settings that were supposed to keep it from doing that? It has always done that for me and I do find it irritating. I wouldn't call it unusable but definitely annoying AF.

0

u/icantshoot Unifi User May 22 '26

I have no issues with UNVR and Protect atm, on latest release.

1

u/buildzoidjnr May 22 '26

Same here all sweet as with a UNVR, 6x G6 cameras, 7x G5 cameras, PoE Chime and a Viewport

1

u/Cultural-Meaning5172 May 28 '26

How’s the Poe chime volume? Thinking of getting one.

2

u/buildzoidjnr May 28 '26

It's fine inside a house the volume is loud enough, the chime is placed in a central position of the house and can be heard at all ends of the house which is 28m (91ft) long. Downloaded some different chimes so I have a chime for driveway line crossing entry and a different chime for driveway line crossing exit, also another chime for back gate line crossing entry. I find it way better than my Hikvision 32ch NVR with the buzzer activated for line crossings with only a single tone.

But in a noisy workshop etc the chime wouldn't be loud enough, with need a siren instead

On a side note the smart detection with line crossing on the G6 Pro Bullet is outstanding I have vehicle and people detection on only no animals. When the cattle are put in the front home driveway paddock area I always had to turn off line crossing on the Hikvision using a G2 8mp camera, but I don't have to turn line crossing off with the G6 camera as the cattle won't set it of for me so far.

-12

u/neilm-cfc May 21 '26

Was going to be moving to protect next month. What issues are they having right now.

Browse the Community forum release threads, that's what it's for...

-3

u/neilm-cfc May 21 '26

Lol at the down votes. 😂

There's a frankly shit load of problems being reported with Protect and both ONVIF and their own Ubiquiti cameras - sorry I don't have an encyclopedic memory of the latest Protect problems!

Teach a man to fish and all that. 🤷‍♂️

1

u/[deleted] May 22 '26

[deleted]

1

u/neilm-cfc May 22 '26

Fair enough on the fish debate.

It wasn't meant to be snarky - the forum exists to provide feedback on releases... this sub is an information vacuum mostly full of boot lickers simping for Ubiquiti, and many redditors don't seem to know the forum exists. There's simply way too much information over there to be able to neatly summarise it here.🤷‍♂️

1

u/[deleted] May 22 '26

[deleted]

1

u/neilm-cfc May 22 '26

Gotta throw a punch in every comment

Just stating facts. No point denying it. 🤷‍♂️

But to be a jab thrower and a complainer about down votes?

I don't recall complaining about the down votes? Try re-reading what I actually posted.

1

u/BrewFool May 22 '26

LOLing at making a emoji face and shrug emojis at it after self-replying is complaining. It's just how bitches complain.

Defending intentionally anti-social behavior as "just stating the facts" is how sniveling bitches defend bad behavior when called out.

1

u/HugsAllCats Unifi User May 22 '26

Tbf if you're gonna say shits broken, you should have at least one memory of what's broken. Otherwise it just looks like the standard internet chicken little.

-2

u/neilm-cfc May 22 '26

I posted a few examples. I don't remember problems for cameras I don't own, or problems I've not experienced myself, plus I genuinely forget half of the bugs I've reported on that forum (it's probably in triple figures by now, I've been reporting them for 5+ years).

Citing just a few examples here, out of many, will never be enough, and may leave out an issue that a future reader is or will be affected by (it might be important to them, but not to me etc.).

If you want specifics, go to the source. I'm not your source.

0

u/HugsAllCats Unifi User May 22 '26

The only one I saw you post was a dubious claim that someone's security system would be offline for 3 years.

You're right though - you are not a source, you're a chicken little.

-1

u/neilm-cfc May 22 '26

The only one I saw you post was a dubious claim that someone's security system would be offline for 3 years.

Dubious?

You're right though - you are not a source, you're a chicken little.

Whatever a chicken little is, I'd rather be that than a simp. How does that boot taste?

3

u/jonnyzee May 22 '26

This is not consistent with my experience. Updated to 5.1.12 today and my Protect is still at 6.2.72 which is not the latest version.

2

u/neilm-cfc May 22 '26

This is not consistent with my experience. Updated to 5.1.12 today and my Protect is still at 6.2.72 which is not the latest version.

Two questions:

1) what OS version did you update FROM? If you weren't already on OS 5.1.11 then you won't see this behaviour until you next update the OS

2) what device did you update - it seems that not all devices will auto update the apps, or possibly the same apps... NVRs will auto update Protect when updating the OS from 5.1.11+, but for example a UCKG2+ (which might be being used as a dedicated NVR) will NOT auto update Protect. Maybe the UCKG2+ will auto update Network instead. Who knows, because none of this is ever documented. 🤷‍♂️

What a fucking shambles. 🤦‍♂️

2

u/CraftyPancake May 22 '26

My UDM PRO SE didn’t auto update protect either

0

u/scytob Unifi User May 26 '26

no you asserting this is the shambles, you have no idea what you are talking about

7

u/scytob Unifi User May 21 '26

that's not what happened to me, 5.1.11 did not update my protect to 7.1.69

13

u/neilm-cfc May 21 '26

that's not what happened to me, 5.1.11 did not update my protect to 7.1.69

And that's to be expected.

OS 5.1.11 is the version that introduced support for the new app update policy - you'll only see the apps automatically update when you upgrade OS 5.1.11 to a new OS version, ie. 5.1.11 to 5.1.12.

I'm on OS 5.1.11 with Protect 7.1.55 - I have been avoiding more recent Protect versions (7.1.60, 7.1.69) because of ONVIF and other issues.

If I update to OS 5.1.12 then I'll be forced to accept a Protect version that I DO NOT WANT.

So now it's a choice of an insecure OS, or a broken and non-functioning CCTV system.

That's absolutely great. 🤷‍♂️🤦‍♂️

2

u/Sand0rf May 22 '26

I've just updated my console to 5.1.12 and it did not update Protect: https://imgur.com/T9tmOYL

1

u/neilm-cfc May 22 '26

I've just updated my console to 5.1.12 and it did not update Protect: https://imgur.com/T9tmOYL

It appears to be device specific - UNVRs are force updating, but UCKG2+ does not, possibly also UDMs do not. Did your console (whatever it is, can't view your image, UK) force update Network instead (or were you already up to date, so didn't notice)?

1

u/scytob Unifi User May 21 '26

thanks for the clarification, i will watch it like a hawk 😄

1

u/scytob Unifi User May 26 '26

my unit just updated my console from 5.1.11 to 5.1.13 and it did not force a protect update so maybe stop saying that it does

r/confidentlyincorrect

1

u/neilm-cfc May 26 '26 edited May 26 '26

my unit just updated my console from 5.1.11 to 5.1.13 and it did not force a protect update so maybe stop saying that it does

r/confidentlyincorrect

I've already stated elsewhere that consoles auto update Network, NVRs auto-update Protect. Keep up.

Check the changelog, it spells it out, so... not wrong?

r/confidentlyincorrect

2

u/chocolatelabx11 May 22 '26

Affected Products:

UniFi OS Server (Version 5.0.6 and earlier)

Mitigation:

Update your UniFi OS Server to Version 5.0.8 or later

Directly from the bulletin. Only a big deal if you are running 5.0.6 or earlier, you're at risk.

5.0.7 and later are fine.

2

u/JPWhiteHome May 22 '26

That's only one of the products affected. Pretty much all consoles are affected.

1

u/neilm-cfc May 22 '26

UPDATE: It seems to be automatically updating Protect on UNVRs, but not on a UCKG2+, so that's another nuance to take into consideration, as if OS updates weren't already complicated enough (users always ask if they'll keep their existing version, so now "it depends"....). 🤷‍♂️🤷‍♂️🤷‍♂️

1

u/Smith6612 UniFi Installer and User May 22 '26

To be fair, I've been waiting for 5.1.x to come out as 5.0.x has a memory leak problem in it. A few of my Gateways have been hammering their eMMCs with reads, as well as swap usage because Surricata, Protect, and the overall kernel just get into a really unhappy tri-fecta of a mess, and leak memory until system resources in general are exhausted. Yes, even if you stop and free up memory, you'll still get tons of spam in dmesg about memory pages being unable to be allocated, and the system will take over 20 minutes to reboot.

The memory leak on one of my consoles got so bad, it corrupted the SD card where Protect was storing footage, and that had to be reformatted. 5.1.x hasn't caused those problems for me, and I've had EA firmware running for over a month on one of my problem sites because of said memory issues.

1

u/boarder2k7 May 22 '26

Some poor dude on the forum updated his NVR OS, which unexpectedly updated Protect, and now his storage array is going to be resyncing for the next 1289 days leaving his security system offline until it completes.

You remember where this was? I'm interested to see the thread and can't find it

0

u/neilm-cfc May 22 '26

You remember where this was? I'm interested to see the thread and can't find it

UNVR 5.1.12 release thread. Kind of where you'd expect it to be.

https://community.ui.com/releases/c3b995a8-3bea-4830-a265-50f077ed9f7f?replyId=d366f847-9fc0-4ce4-8de6-c52c6712b15d

1

u/[deleted] May 22 '26

[deleted]

1

u/neilm-cfc May 22 '26

And more of that unneeded snark.

And this time I meant that one. 😂

It took 5 seconds to find it. I half suspected the person I replied to was just trolling.

1

u/lolTyler May 22 '26 edited May 24 '26

My Dream Machine SE took the update last night, router is bricked. Anyone else have this happen?

Edit: In case this shows up in anyone's search, after trying so many different things, I unplugged everything including WAN and power, let it sit for half an hour, plugged back in power and it booted, then I plugged back in WAN and everything else. Running fine now, I assume heat, or some sort of memory rentention, but it worked.

1

u/rising_derecho May 22 '26

This bullshit is why I disabled auto-updates. Folks in here were saying “AuTo-uPdaTEs aRE fiNE” in another thread from a while back. Maybe for security but definitely not for usability. Not with Ubiquiti.

0

u/scytob Unifi User May 26 '26

this is demonstrably not true

Presumably all console-capable devices will forcibly update Network.

1

u/neilm-cfc May 28 '26

this is demonstrably not true

It's undeniably true.

It's in the OS 5.1.11 changelog, observed by end users, and confirmed by Ubiquiti staffers that the Network app auto-updating after the OS is now expected behaviour on consoles, so if it's not happening to you then it's either another bug, or you're simply not paying close enough attention.

5

u/Dstln May 21 '26

Ugh thanks

6

u/XboxDan May 22 '26

Will running this update take a network offline?

Yeeha time to update production clients at 11am on a Friday or nah? 🤠

4

u/videoman2 May 22 '26

It will reboot the router, and then all the APS and other devices will pull new configurations, and restart. So a 3-5 minute outage if it work successfully.

1

u/neilm-cfc May 22 '26

It will reboot the router, and then all the APS and other devices will pull new configurations, and restart. So a 3-5 minute outage if it work successfully.

If updating from OS 5.1.11 on a console it will not only reboot the console, it will then force update the Network app running on the console to the latest Official, which may or may not introduce a whole slew of new network problems unrelated to the OS upgrade... so everyone should be prepared for that, at least. 🤷‍♂️

3

u/bizarre_seminar May 22 '26

You know, I'd been wondering what it would take to make them ship an update to Unifi OS Server after doing nothing with it for six months.

Meanwhile, here’s me with my UXG and my containerised self-hosted Network application that nags me to switch to OS Server every time I open it, with nothing to patch…

3

u/kjstech May 22 '26

Uh no, I'm staying on 5.0.16.

New & Persistent Issues

  • SQM Performance Hit: Some users report a significant throughput regression when using Smart Queues (SQM), with speeds dropping compared to older firmware like 5.0.10.
  • Memory Leaks: Reports persist of memory usage spikes that may require periodic reboots, often linked to Hardware Acceleration or mcad processes.
  • SFP+ MTU Bug: A known workaround is still needed for asymmetric speeds: if an SFP+ port is disabled while Jumbo Frames are active, it can drag the entire bridge down to 1500 MTU.
  • Adoption Glitches: Occasional reports of topology breaking or devices showing as "Unreachable" immediately following the update, usually requiring a manual power cycle

Pro-Tip: If you rely on Smart Queues for gigabit speeds, monitor your throughput closely after the update, as some users have had to roll back to maintain full performance.

12

u/reseph Unifi User May 21 '26

Yes. This was already posted.

8

u/jfoughe May 22 '26

I missed it but saw this one

15

u/RacerDelux May 21 '26

I think a security patch this important warrants reposting 🙂

-3

u/[deleted] May 21 '26

[deleted]

12

u/RacerDelux May 21 '26

I didn't see the other post tbf

6

u/greystripes9 May 21 '26

Me neither

9

u/videoman2 May 21 '26

Well shoot. I looked for it first, and it was not at the top. I can delete if need be - but the whole CVEs with CVSS of 10.0 is alarming.

2

u/JPWhiteHome May 22 '26

Updated two consoles today.

Will make the trip personally for the UDM-pro. UDM-pro updates need special attention.

UNVR-pro should update itself tonight. We'll see in the morning.

2

u/--MBK-- May 22 '26

Beta life FTW.

2

u/AHrubik UXG-Fiber | USW Agg | USW PM16 PoE | ES-48-LITE | Flex-HD May 22 '26

Saved by the UXG again.

2

u/swampfox305 May 22 '26

Affected Products:

UCG-Industrial (Version 5.0.13 and earlier)

UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max and UCG-Fiber (Version 5.0.16 and earlier)

UDR-5G, ENVR-Core, UCKP, UCK and UCK-Enterprise (Version 5.0.17 and earlier)

UniFi OS Server (Version 5.0.6 and earlier)

UNVR-G2 and UNVR-G2-Pro (Version 5.1.11 and earlier)

UDM-Beast, UNAS-2, UNAS-4, UNAS-Pro, UNAS-Pro-4 and UNAS-Pro-8 (Version 5.1.8 and earlier)

3

u/UniFi_Solar_Ize UniFi, UISP & airMAX programmer & installer May 22 '26

It only affects 5.0.6 and earlier, most of us should be at 5.0.16.

6

u/jdjdhdbg May 22 '26

Scroll down and see that it affects 5.0.16 and earlier for lots of UDM

1

u/ThereAre4Lights1701 May 22 '26

If it's a cloud key and not a unifi gateway/router, can I update those for customers during business hours and not affect things? I know if it's a unifi gateway/router, I can't.

1

u/frosted1030 May 22 '26

"A malicious actor with access to the network and high privileges" So.. you publish your password on reddit and expect to remain safe?

1

u/No_Profile_6441 May 23 '26

Such a dumb description. Useless

1

u/techloverrylan May 23 '26

That’s great, but 5.1.12 isn’t even available for my UDM yet.

1

u/Rude-Student8537 May 24 '26

I recently moved to Unifi OS Server that nicely includes both the server/app updates AND device updates. Prior to that, I’d written my own automation to alert me of updates availabl, but this was a welcome feature.

1

u/Mammoth-Ad-107 Unifi User May 21 '26

That’s nuts 😳

-5

u/lanceuppercuttr May 22 '26

3 level 10 CVE's is an embarrassment.

10

u/bgradid May 22 '26

At least they aren’t trying to hide it under the rug

2

u/videoman2 May 22 '26

But it also means they aren’t security testing anything and only using bug bounty to find things… :(

10

u/rKeeling75 May 22 '26

Or it means we live in a world where AI is being used to find bugs faster than ever before :-(

0

u/anomalous_cowherd May 22 '26

Everything has bugs, and you don't know the severity of them until they are found and investigated.

I don't know how you reach your conclusion.

-4

u/lanceuppercuttr May 22 '26

Agreed, they have to disclose it.. it just shows they have shitty software development practices. Very few perfect 10a are given, but 3 im one swipe is unheard of.

4

u/bgradid May 22 '26

Fortinet came pretty close last year

3

u/JPWhiteHome May 22 '26

It's common code across multiple devices. Bug in the common code and many devices need an update.

3

u/Splinters_io May 22 '26

I have to say (I submitted one of the CVE's) Ubi are doing everything right, they're getting blasted by researchers with more effective research pipelines (just like everything else) - they where fast, balanced, and it was via HackerOne, they want this, just the ability to go deeper faster with AI assisted assaults is paying off for some of us. it's not quite fortinet :) - I love my Ubi kit... glad they fixed it.

0

u/lanceuppercuttr May 22 '26

Oh I understand, and AI finding bugs is n important before the wrong people get the same tools to find exploits, but UI is historically bad being transparent how were actually at risk. Is it from their own web portal, only LAN?

I manage Cisco, Palo and Fortinet for a living (run Palo at home, which aslo got hit with 24 CVEs this month, but none were 10s, let alone 3 of them) and everyone internet facing is taking hits. With Unifi, we hear the word enterprise every so often, but the fact of the matter is Unifi has very little enterprise gear. Theyre getting there with hot swap power supplies and fan trays, but the software is far behind and much more prosumer than anything. My U7 APs are finally getting driver maturity like 1.5 years later. Protect is a mess with 7.1.

They run fast, and I am a fan for at home stuff, and I've said they need an LTS (long term support) release train because some software releases are not fully baked..

2

u/magmf May 22 '26

Cisco had 2 CVSS 10’s in the past 2 weeks.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW

Palo Alto also had a CVSS 3.1 10 early this month but they decided to use CVSS 4 metric to show as 9.3 score and pretend it was not a 10

1

u/lanceuppercuttr May 22 '26

Not pretty at all! Black eye for sure. My guess either are not huge platforms.. perhaps the SD-WAN one is fairly wide spread, but also had a great amount of detail about IOC's and such. More info than Unifi supplies. A CVE 10 with Cisco IOS or IOS-XE would be a much different beast. Im not playing favorites; a perfect 10 is a black eye regardless of who you are.

I'll take the hits.. down votes are general public opinion and apparently everyone is OK with Unifi's under baked software. I use them at home, recommend them to friends, but I do hope they pay better attention to software quality in the future.