CVE-2026-50748: UI UniFi Access

Critical severity, CVSS 9.9. EPSS: 1.6% chance of exploitation in the next 30 days.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

Affected products

• UI UniFi Access: before 4.2.29 (fixed in 4.2.29)

Published 2026-07-02. Last modified 2026-08-17.