Skip to content
OpenAdvisories
Critical · 9.9 CVE-2026-50748 EUVD-2026-41384GHSA-fp2c-q39c-97j4

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acc…

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by hackerone

Description

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Access Application < 4.2.29 4.2.29

Advisories 2

References