CVE-2026-50746: UI UniFi Connect Application

Critical severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

Affected products

• UI UniFi Connect Application: before 3.24.20 (fixed in 3.24.20)

Published 2026-07-02. Last modified 2026-07-29.