Skip to content
OpenAdvisories
Critical · 9.9 CVE-2026-50747 EUVD-2026-41390GHSA-q2c2-qqhg-wj5p

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found…

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: UniFi Talk Application Category: Network devices

Description

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Talk Application < 5.2.2 5.2.2

Advisories 2

References