What I’d plan for hosting, controller addressing, and validation before moving to UniFi OS Server and Network 11.

I migrated my UniFi controller to the new UniFi OS Server with Network 11. Here's how the migration works, what's new, and what home labs need to know.

CERT-Bund (BSI) meldet mehrere Schwachstellen in Ubiquiti UnifiOS mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht beim CERT-Bund (BSI…

Ubiquiti has released patches for three maximum-severity flaws affecting UniFi Protect, UniFi OS, and UniFi Talk that could let remote attackers bypass authentication or trigger command injection without privileges. The company also fixed 18 more critical issues across its product line, including systems that have previously been targeted by botnets and active exploitation campaigns. #Ubiquiti #UniFiProtect #UniFiOS #UniFiTalk #CVE-2026-77537 #CVE-2026-77550 #CVE-2026-77554

Ubiquiti has released fixes for critical flaws in UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could lead to command injection, privilege escalation, and unauthorized device changes. Although these issues have not been seen exploited in the wild, CISA recently flagged other UniFi OS vulnerabilities as weaponized,...

Ubiquiti has patched seven critical vulnerabilities in UniFi OS, including CVE-2026-50746 in UniFi Connect Application that could allow command injection on affected host devices. The company also fixed six additional critical flaws across UniFi Talk, UniFi Access, UniFi Protect, UniFi OS Server, and multiple Ubiquiti devices, urging users to update immediately. #Ubiquiti #UniFiOS #CVE-2026-50746

CISA warned that CVE-2025-67038 in Lantronix EDS5000 Series devices is being actively exploited, and FCEB agencies must apply the fix by June 26, 2026. The advisory also highlighted active exploitation of UniFi OS flaws chained as CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, which can lead to root-level code execution and broader network compromise....

Threat actors are actively exploiting three critical Ubiquiti UniFi OS vulnerabilities, prompting CISA to add CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 to its Known Exploited Vulnerabilities catalog. BishopFox confirmed the flaws can be chained to bypass authentication and achieve command injection, potentially enabling rogue admin creation and lateral movement in enterprise networks. #Ubiquiti...

Daily Recap, A wave of urgent patches hit Drupal, Ubiquiti (UniFi OS), Cisco, Microsoft Defender, TrendAI, and Apex One, including in-the-wild exploitation of a Drupal SQLi and an Apex One zero-day. In addition, Google accidentally exposed details of an unfixed Chromium issue, while botnet and malware reporting covered the alleged Kimwolf operation, Showboat Linux activity against Middle East telecoms, and BYOVD-driven exploit chains. #Drupal #UniFiOS #ApexOne #Kimwolf #Showboat #Chromium #CISA #KEV

Ubiquiti has released fixes for five UniFi OS vulnerabilities, including three maximum-severity flaws that could let remote attackers make unauthorized changes, read files, or execute commands without privileges. The issues affect Internet-exposed UniFi OS devices and were reported through Ubiquiti’s HackerOne bug bounty program. #UniFiOS #CVE-2026-34908 #CVE-2026-34909 #CVE-2026-34910 #CVE-2026-33000 #CVE-2026-34911

This vulnerability (CVE-2026-47370) in UniFi OS Server involves improper input validation (CWE-20) that enables an attacker with network access and low privileges to execute arbitrary commands via command injection. The CVSS 3.1 score of 9.

A collection of enhancements for UnifiOS based devices - unifi-utilities/unifios-utilities