Ubiquiti Just Patched 21 Critical UniFi Flaws, Here's What UAE Networks Need to Do

On August 26, 2026, Ubiquiti published a security advisory covering 21 critical-severity vulnerabilities spread across nearly its entire UniFi software line, including three flaws that scored a perfect 10.0 on the CVSS severity scale. If you're running UniFi gear anywhere on your home or business network in the UAE, this is the kind of update notification you can't leave sitting unread.

What Ubiquiti Disclosed

The advisory covers UniFi Protect, UniFi OS Server, UniFi Network Application, UniFi Access, UniFi Talk, UniFi Connect, and several connected hardware components including the Connect Display Cast Pro and Protect AI Key. Three of the flaws hit the maximum possible severity score of 10.0: CVE-2026-77537 in UniFi Protect, CVE-2026-77550, an authentication bypass in UniFi OS, and CVE-2026-77554 in UniFi Talk. Most of the remaining flaws score 9.0 or higher. In practical terms, an attacker with network access to an unpatched device could potentially bypass the login screen entirely, escalate privileges, or run commands on the system without ever needing valid credentials.

Ubiquiti hasn't confirmed active exploitation of these specific vulnerabilities, but the advisory arrives against a backdrop of prior UniFi flaws that were weaponized within weeks of disclosure earlier in 2026. That history is exactly why security researchers are treating this round as urgent rather than routine.

What to Update, and To What Version

Ubiquiti has shipped fixes across the board. If you manage UniFi hardware, make sure you're running at least these versions:

• UniFi Protect: 7.2.105
• UniFi OS Server: 5.1.37
• UniFi Network Application: 10.5.67
• UniFi Access: 4.3.5
• UniFi Talk: 5.3.2
• UniFi Connect: 3.24.22

Most UniFi consoles and cloud gateways will surface these as a standard firmware or application update inside the UniFi Network or UniFi OS dashboard, so this isn't a manual reflash for most households or small offices, but it does require someone to actually click update rather than assume it happens automatically.

Ubiquiti is also recommending two habits alongside the patch itself: keep management interfaces off the public internet, and turn on multi-factor authentication for any administrative account. Both are quick changes inside the UniFi OS console and meaningfully reduce exposure even before every device is fully patched.

Why This Matters More in the UAE

UniFi has become a default choice for UAE villas, offices, retail fit-outs, and hospitality projects precisely because it's straightforward to self-manage, but that same self-managed model means there's no ISP or managed service provider automatically pushing security patches on your behalf. A gateway, camera system, or access controller running months-old firmware in a villa or a small business here is just as exposed as one anywhere else, and often more likely to go unpatched simply because nobody is specifically tasked with checking. If you haven't logged into your UniFi console in a while, this advisory is a good reason to do it this week.

Florence Trading stocks Ubiquiti's UniFi networking lineup for UAE homes and businesses, from gateways and switches to Protect cameras and access hardware. Whether you're patching an existing setup or planning a new install, you can browse the current range on our Ubiquiti collection page.