Vulnerabilities

CVSS

9.9 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Risk score

79.2

Published

2026-07-02

Status

Analyzed

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

Weaknesses

CWE-89

Coverage 2

ransomware

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

This week’s security news is dominated by a concerning trend: vulnerabilities are being exploited faster than patches can be applied, leading to a surge in attacks. Notable events include a ShareFile threat urging users…

The Hacker News · Jul 13, 2026 High

CVE-2026-50746CVE-2026-50747CVE-2026-50748

vulnerability

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS

Ubiquiti Networks has released security updates to address a series of critical vulnerabilities affecting its UniFi network management products, including UniFi Connect, Talk, Access, Protect, and OS. These flaws could a…

The Hacker News · Jul 8, 2026 High

CVE-2026-50746CVE-2026-50747CVE-2026-50748UNRUvulnerabilitynetwork securitycommand injection

All articles mentioning it

Advisories and references

• community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb...