{"vulnerability": "cve-2026-5074", "sightings": [{"uuid": "f22f851a-7b38-482b-92fe-aa6651a68875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5074", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndjawwnli27", "content": "CVE-2026-5074 - ARMember Premium\nCVE ID : CVE-2026-5074\n \n Published : June 2, 2026, 6:30 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the `get_private_content_data` AJ...", "creation_timestamp": "2026-06-02T21:15:01.574192Z"}, {"uuid": "82d6bd63-5974-433e-9982-519eb8be3bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5074", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnfweqmvhd2y", "content": "CVE-2026-5074 armember (CVSS Score 6.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-03T20:15:07.234466Z"}, {"uuid": "0ce9763b-4c9f-4a54-8b90-dc439264a90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50749", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/hhbopx5ltrfbd", "content": "CVE-2026-50749: Apache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisions", "creation_timestamp": "2026-08-05T15:43:11.494537Z"}, {"uuid": "ce50288c-6ff4-4764-b347-4e5fde15745e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5v53loia2n", "content": "CVE-2026-50741 - Nuxeo XML-RPC Bypass for CVE-2026-34916\nCVE ID : CVE-2026-50741\n \n Published : June 26, 2026, 1:11 a.m. | 33\u00a0minutes ago\n \n Description : Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix ca...", "creation_timestamp": "2026-06-26T02:22:02.178465Z"}, {"uuid": "3c5faee7-4f05-4106-9d1c-10657d68e66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vawkgdf2o", "content": "CVE-2026-50744 - Revive Adserver XML-RPC API Session ID Leak Leads to Authentication Bypass\nCVE ID : CVE-2026-50744\n \n Published : June 26, 2026, 1:11 a.m. | 33\u00a0minutes ago\n \n Description : A bypass to the admin\u2011only restriction of the XML\u2011RPC API in Revive Adserver 6.0.7. The...", "creation_timestamp": "2026-06-26T02:24:10.910120Z"}, {"uuid": "ee121a8e-6fab-44d5-873b-27dd7d671de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vzs2zui2q", "content": "CVE-2026-50745 - [Vendor] Smarty URL Helper Cross-Site Scripting\nCVE ID : CVE-2026-50745\n \n Published : June 26, 2026, 1:11 a.m. | 33\u00a0minutes ago\n \n Description : A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this sc...", "creation_timestamp": "2026-06-26T02:38:06.510435Z"}, {"uuid": "6a00cbc4-c360-4bfb-913c-06722b0d4b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5x23xrsh23", "content": "CVE-2026-50740 - Revive Adserver Reflected Cross-Site Scripting\nCVE ID : CVE-2026-50740\n \n Published : June 26, 2026, 1:11 a.m. | 33\u00a0minutes ago\n \n Description : A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 a...", "creation_timestamp": "2026-06-26T02:56:09.262886Z"}, {"uuid": "e955954f-d57d-4728-9c2d-6fec8430c321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp5xd2fdsk2b", "content": "CVE-2026-50742 - A stored XSS vulnerabilities exists in the `mainte\nCVE ID : CVE-2026-50742\n \n Published : June 26, 2026, 1:11 a.m. | 33\u00a0minutes ago\n \n Description : A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tool...", "creation_timestamp": "2026-06-26T03:01:09.323745Z"}, {"uuid": "f5b44ba7-46be-47c2-a5c0-897893802804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhwtpxlh23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50740: \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0447\u0435\u0440\u0435\u0437 zone-include.php\n\n\n\nhttps://kripta.biz/posts/5629D5F9-E05D-44F3-A199-E77131AA132F", "creation_timestamp": "2026-06-29T21:52:30.971128Z"}, {"uuid": "6e33d993-a2b8-400d-8a92-c71edbd8dbfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50742", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhxli3am2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50742: \u0445\u0440\u0430\u043d\u0438\u043c\u043e\u0435 XSS \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 maintenance-acl-check.php \u0438 maintenance\n\n\n\nhttps://kripta.biz/posts/60276030-D456-47ED-99E4-67F7AFFB6BE0", "creation_timestamp": "2026-06-29T21:52:56.286233Z"}, {"uuid": "0eb1c727-84cf-49eb-973b-664c9cef12c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50741", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphigtxe7j2d", "content": "\u041e\u0431\u0445\u043e\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE-2026-34916: \u0443\u0433\u0440\u043e\u0437\u0430 CVE-2026-50741 \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\n\n\n\nhttps://kripta.biz/posts/13A7304C-1D76-40C7-A6C5-DB9BE204445D", "creation_timestamp": "2026-06-29T22:01:28.285114Z"}, {"uuid": "00227490-4475-4d91-a719-6ce224059361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50744", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphitkayhs27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50744 \u0432 Revive Adserver 6.0.7: \u043e\u0431\u0445\u043e\u0434 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 XML-RPC API\n\n\n\nhttps://kripta.biz/posts/71089B89-D915-462D-9F60-99834DA049E3", "creation_timestamp": "2026-06-29T22:08:34.220046Z"}, {"uuid": "be558b24-190f-4b52-8256-500873ac23cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50741", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpj6fkkpvf2v", "content": "\ud83d\udccc CVE-2026-50741 - Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can be bypassed either by send... https://www.cyberhub.blog/cves/CVE-2026-50741", "creation_timestamp": "2026-06-30T14:07:06.979181Z"}, {"uuid": "a1cc718a-1e50-4ae6-9da4-c53819d03d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mponk2wkp327", "content": "CVE-2026-50746 - UniFi Connect Improper Access Control Command Injection\nCVE ID : CVE-2026-50746\n \n Published : July 2, 2026, 2:49 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : A malicious actor with access to the network could exploit an Improper Access Control vulnerability...", "creation_timestamp": "2026-07-02T18:21:23.046266Z"}, {"uuid": "bb6040a6-66a8-45ec-8b89-e23473444f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mponnaa4652m", "content": "CVE-2026-50747 - UniFi Talk SQL Injection Privilege Escalation\nCVE ID : CVE-2026-50747\n \n Published : July 2, 2026, 2:49 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL I...", "creation_timestamp": "2026-07-02T18:23:09.347389Z"}, {"uuid": "45c87f2f-7a05-4620-9598-94942189f527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50748", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppybm6qum2k", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-50748: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u0441\u0435\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/5BA95E6D-17E1-4653-B190-BA2D48209517", "creation_timestamp": "2026-07-03T07:06:10.576051Z"}, {"uuid": "41f21110-5501-4873-82f5-1fd6e562aece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50748", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriuhp4u22r", "content": "CVE-2026-50748 - unifi access application\nA vulnerability in UniFi Access Application allows an attacker with low-level access to the network to potentially execute malicious code on the device. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ubiquiti #CVE #infosec", "creation_timestamp": "2026-07-03T21:35:42.493517Z"}, {"uuid": "6eb4f42e-e515-4192-aaf9-7df25dcad489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriumewrl2b", "content": "CVE-2026-50746 - unifi connect application\nA vulnerability in UniFi Connect Application allows an attacker with network access to potentially take control of a device. This could happen if an attacker is able to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ubiquiti #CVE #infosec", "creation_timestamp": "2026-07-03T21:35:47.600614Z"}, {"uuid": "c339d656-0621-499f-9b2a-8b0f41a3c68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpriv4u3qs2y", "content": "CVE-2026-50747 - unifi talk application\nA hacker with network access and limited rights can use weaknesses in the UniFi Talk App to gain more control over the device. This could lead to sensitive data being accessed\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ubiquiti #CVE #infosec", "creation_timestamp": "2026-07-03T21:36:05.197757Z"}, {"uuid": "4fb51f43-4001-46dc-bfd3-5f4af040872e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq2pmg7nb42g", "content": "Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now.\n\n#Ubiquiti #UniFi #UniFiOS #UniFiProtect #CommandInjection #CyberSecurity", "creation_timestamp": "2026-07-07T13:30:26.731311Z"}, {"uuid": "7bc46c1a-69f3-455b-af8e-84e24468da4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116883536579736164", "content": "CRITICAL: Ubiquiti UniFi OS hit by 7 flaws, incl. CVE-2026-50746 (command injection) in UniFi Connect \u22643.4.16. Exploitable w/ network access, no user interaction. Update to 3.4.20+ ASAP. No in-the-wild exploits yet. https://radar.offseq.com/threat/ubiquiti-warns-of-new-max-severity-unifi-os-vulner-d14602d3f7d74505 #OffSeq #Ubiquiti #Infosec #CVE202650746", "creation_timestamp": "2026-07-08T09:00:30.534294Z"}, {"uuid": "37ed949e-2a20-4ef6-ae07-41eb4713df5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq4qyi7hpk2e", "content": "Ubiquiti patched 7 critical UniFi OS flaws, including CVE-2026-50746 in UniFi Connect, which could enable command injection. Update UniFi Connect to 3.4.20 or later. #Ubiquiti #UniFiOS #CVE202650746", "creation_timestamp": "2026-07-08T09:00:48.849571Z"}, {"uuid": "0d1303a9-837f-4223-bd31-1d0bc2d442d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq4qypt2go2x", "content": "Ubiquiti UniFi OS: 7 CRITICAL vulns incl. CVE-2026-50746 (command injection) in UniFi Connect \u22643.4.16. Easily exploitable \u2014 update to 3.4.20+ now to mitigate risk. https://radar.offseq.com/threat/ubiquiti-warns-of-new-max-severity-unifi-os-vulner-d14602d3f7d74505 #OffSeq #Ubiquiti #PatchNow", "creation_timestamp": "2026-07-08T09:00:53.773821Z"}, {"uuid": "89246d8d-d661-4e18-b9f6-a06703f6816c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mq4ri4iiui2k", "content": "Ubiquiti Patches CVE-2026-50746, Maximum-Severity Flaw in UniFi OS", "creation_timestamp": "2026-07-08T09:09:09.343268Z"}, {"uuid": "6f84fe72-debc-4468-bffa-4a024ee5ddbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "1826d7b4-9191-460d-87a3-5297d3e54b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "b6bc1800-eac8-490a-971b-99ce0fc0ff4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-50748", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6", "content": "", "creation_timestamp": "2026-07-08T11:01:21.496106Z"}, {"uuid": "58bab188-61c7-4d86-9fb1-7f9faa3c4099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mq4yvrng4k2o", "content": "\u26a0\ufe0f Ubiquiti Security Advisory Bulletin 066: 25 vulnerabilities across the UniFi ecosystem (OS, Network, Protect, Access, Talk, Connect). Several critical, up to CVSS 10.0 (CVE-2026-50746, UniFi Connect). Update per advisory. Query: web.title~\"UniFi OS\"", "creation_timestamp": "2026-07-08T11:22:09.064592Z"}, {"uuid": "e13659c8-cae8-4fe2-837b-464f7bbbd943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mq54thgli62k", "content": "Ubiquiti patched 7 critical UniFi issues, including max-severity CVE-2026-50746 in UniFi Connect that can lead to command injection. Update Connect to 3.4.20+ and keep controllers off the open internet. \ud83d\udee0\ufe0f\n\n#UniFi #Security #SelfHosting", "creation_timestamp": "2026-07-08T12:32:20.913540Z"}, {"uuid": "2f91a00e-41c1-47b2-960e-a74914b4898f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116884482690047419", "content": "The CVE-2026-50746 vulnerability affects UniFi Connect Application (versions 3.4.16 and earlier), a management software suite that Ubiquiti customers can use to automate and manage commercial building operations. https://www.bleepingcomputer.com/news/security/ubiquiti-warns-of-new-max-severity-unifi-os-vulnerability/", "creation_timestamp": "2026-07-08T13:01:06.600589Z"}, {"uuid": "0afb30e7-721b-41da-867f-0d91bc7c3bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mq56h43yp22y", "content": "The CVE-2026-50746 vulnerability affects UniFi Connect Application (versions 3.4.16 and earlier), a management software suite that Ubiquiti customers can use to automate and manage commercial building operations. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-07-08T13:01:14.590123Z"}, {"uuid": "4d7fcf8e-f256-4719-ad7e-469b44064aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://thehackernews.com/2026/07/ubiquiti-patches-critical-unifi-flaws.html", "content": "Ubiquiti has shipped updates to address multiple critical security flaws impacting UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS that could result in privilege escalation and arbitrary command execution.\n\nThe list of vulnerabilities is as follows -\n\n\n  CVE-2026-50746 (CVSS score: 10.0) - An improper access control vulnerability in UniFi Connect Application that an attacker", "creation_timestamp": "2026-07-08T16:01:24.739423Z"}, {"uuid": "a0028493-e6dc-4171-8059-a448f9d61679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq5raroljk2c", "content": "\ud83e\udd16 CVE-2026-50746 (CVSS 10.0): Critical flaws in UniFi Connect, Talk, Access, Protect & OS. RCE via improper access control \u2014 patch now.\nhttps://thehackernews.com/2026/07/ubiquitipatchescriticalunififlawsacrossconnecttalkaccessprotectandos", "creation_timestamp": "2026-07-08T18:37:42.390136Z"}, {"uuid": "fdf5c5f3-76fc-4e42-bc0f-7e2647ab9ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mq5vuj6rnu26", "content": "Ubiquiti patched critical UniFi Connect, Talk, Access, Protect, and OS flaws, including CVE-2026-50746 (10.0). Apply updates now and review configs. #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/07/ubiquiti-patches-critical-unifi-flaws.html", "creation_timestamp": "2026-07-08T20:00:19.923566Z"}, {"uuid": "bbde7148-a86c-4bb5-9c6b-c8d95c927092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq67mfcsst22", "content": "CVE-2026-50746: Ubiquiti's Unpatched Flaws Are an Open Invitation to Attackers #CyberSecurity #Vulnerability #CVE2026", "creation_timestamp": "2026-07-08T22:54:44.999851Z"}, {"uuid": "2c0fa515-d4d4-4d82-8b23-0c0a9ecee4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq67miy44h2c", "content": "CVE-2026-50746: Ubiquiti's Critical Flaw Leaves Devices Open to Command Injection #CVE2026 #Ubiquiti #CyberSecurity", "creation_timestamp": "2026-07-08T22:54:48.883405Z"}, {"uuid": "8fdc425b-625b-4f4b-8a64-57316377c6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq67mmmjxf22", "content": "CVE-2026-50746: Ubiquiti\u2019s Response Raises Critical Security Concerns #CVE2026 #Cybersecurity #Ubiquiti", "creation_timestamp": "2026-07-08T22:54:52.799924Z"}, {"uuid": "60cfd500-ee83-4727-8e5f-bfa05c1ab407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq67qynq3n2j", "content": "CVE-2026-50746: Is Ubiquiti's Response to UniFi OS Flaws Enough? #Ubiquiti #CyberSecurity #UniFiOS", "creation_timestamp": "2026-07-08T22:57:19.771820Z"}, {"uuid": "e4af33ed-7f3c-4e51-9881-675615b8b831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq6mlkmfo42c", "content": "\ud83e\udd16 CVE-2026-50746 (CVSS 10.0): Critical flaws in Ubiquiti UniFi across Connect, Talk, Access, Protect, and OS. Privilege escalation and arbitrary command execution.\nhttps://thehackernews.com/2026/07/ubiquiti-patches-critical-unifi-flaws.html", "creation_timestamp": "2026-07-09T02:46:55.136433Z"}, {"uuid": "7d3bb093-ddbf-4576-86fb-460d901c4b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50746", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq6o234h6i2n", "content": "\ud83d\udcf0 Ubiquiti Rilis Patch untuk Kerentanan Kritis UniFi OS, Termasuk Celah Command Injection dengan Skor Maksimum\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/09/ubiquiti-patch-cve-2026-50746-unifi-os/\n\n#commandInjection #cve #cve-2026-50746 #cybersecurity #keamananSiber #nas #r", "creation_timestamp": "2026-07-09T03:12:55.964657Z"}, {"uuid": "25065124-f605-4178-aef0-01c1d3f9a235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqafhwt25k2a", "content": "Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation\n\nUbiquiti patched seven UniFi OS flaws, including critical CVE-2026-50746, which allows command injection in UniFi Connect Application. Ubiquiti released security updates for seven critica\u2026\n#hackernews #news", "creation_timestamp": "2026-07-09T19:44:56.976940Z"}, {"uuid": "a0e9f0a0-fa3e-40e8-b2fc-f40d61be8898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb4iwo3te2f", "content": "\ud83d\udccc CVE-2026-50746 - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Co... https://www.cyberhub.blog/cves/CVE-2026-50746", "creation_timestamp": "2026-07-10T02:37:06.682306Z"}, {"uuid": "506086d2-ca80-45b1-92ac-377082121a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb66lzmvv2g", "content": "\ud83d\udccc CVE-2026-50747 - A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi T... https://www.cyberhub.blog/cves/CVE-2026-50747", "creation_timestamp": "2026-07-10T03:07:07.157184Z"}, {"uuid": "da5b6ec1-0ad4-4d41-828c-4171f844a696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50748", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb7ua3nxs2f", "content": "\ud83d\udccc CVE-2026-50748 - A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Applica... https://www.cyberhub.blog/cves/CVE-2026-50748", "creation_timestamp": "2026-07-10T03:37:07.312383Z"}, {"uuid": "bc745b5c-4322-47bf-94c0-e1c2ec504b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mqbf2rpixc2s", "content": "UniFi Connect's CVE-2026-50746 is a perfect 10.0 - unauth attackers run host commands on 100K+ exposed devices. https://intel.threadlinqs.com/threat/TL-2026-1159 #ThreatIntel #CVE_2026_50746 #CVE_2026_50747 #SAB066", "creation_timestamp": "2026-07-10T05:10:16.077273Z"}, {"uuid": "a356ba0c-12c6-4f34-8d50-21cd80dd39f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqbz5yqkqc2t", "content": "Ubiquiti Fixes Critical CVE-2026-50746 and Multiple UniFi OS Vulnerability Flaws", "creation_timestamp": "2026-07-10T11:09:58.126858Z"}, {"uuid": "6181a0d2-2c7b-4863-a243-e8a0286a6351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50746", "type": "seen", "source": "https://bsky.app/profile/intelnightowl.bsky.social/post/3mqdqckwnbh23", "content": "Ubiquiti patches 25 UniFi OS vulnerabilities, including critical CVE\u20112026\u201150746 with CVSS10, a move that may affect global network security in the #USA #CyberSecurity https://thecyberexpress.com/cve-2026-50746-ubiquiti-unifi-os-vulnerability/", "creation_timestamp": "2026-07-11T03:36:47.916603Z"}, {"uuid": "942d430f-2c60-4a42-8125-18a7f0c0d317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqdv3ku4t22z", "content": "Daily IT Security Digest \u2014 2026-07-11\nupdate for its UniFi OS platform addressing 25 vulnerabilities, most notably CVE-2026-50746 rated CVSS 10. The vulnerabilities affect network equipment used globally, making this patch essential for enterprise and residential deployments alike. [Source:", "creation_timestamp": "2026-07-11T05:02:20.729162Z"}, {"uuid": "34211c6d-6bb5-4b61-8ca3-ab2d00fefd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-13T13:00:04.806861Z"}, {"uuid": "d5560e0e-754d-4efa-bd7d-d45cd9fb9d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-13T13:00:04.901263Z"}, {"uuid": "9fd2ff65-09b9-4cb6-8b9e-8e3609b55d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50748", "type": "seen", "source": "https://t.me/true_secator/8386", "content": "Ubiquiti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 UniFi OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0443\u044e \u043a\u0430\u043a CVE-2026-50746, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCVE-2026-50746 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect (\u0432\u0435\u0440\u0441\u0438\u0438 3.4.16 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435), \u043f\u0430\u043a\u0435\u0442 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u044b Ubiquiti \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0434\u0430\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0435\u0434\u0438\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Improper Access Control), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 UniFi Connect, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 UniFi Connect \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\nUbiquiti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0448\u0435\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2026-50747, CVE-2026-50748, CVE-2026-54400, CVE-2026-54402, CVE-2026-55115, CVE-2026-55116) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 UniFi Talk, UniFi Access \u0438 UniFi Protect, UniFi OS Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0448\u043b\u044e\u0437\u043e\u0432, NAS \u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Ubiquiti.\n\nUbiquiti \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0431\u044b\u043b\u0438 \u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Censys \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 UniFi OS,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (\u043f\u043e\u0447\u0442\u0438 50 000 IP) \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410. \u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043b\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0435 \u044f\u0441\u043d\u043e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u0430\u043d\u043d\u044b\u0435 Censys \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0435 \u043f\u0435\u0440\u0438\u043e\u0434\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0433\u0440\u0443\u043f\u043f\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u0438 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e Ubiquiti, \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044f \u0435\u0451 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2026-07-13T13:00:04.951978Z"}, {"uuid": "322bfc2c-4a37-48bd-a5d4-c7439da46bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "https://t.me/HackerNewscyber/3218", "content": "\u2708\ufe0f\u0631\u0641\u0639 \u06f7 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 UniFi OS\u061b Ubiquiti \u0647\u0634\u062f\u0627\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc \u062f\u0627\u062f\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a Ubiquiti \u0647\u0641\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 UniFi OS \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f \u06a9\u0647 \u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0622\u0646\u200c\u0647\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-50746\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0645\u062e\u0631\u0628 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0634\u0631\u06a9\u062a \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 UniFi Connect \u0631\u0627 \u0628\u0647 \u0646\u0633\u062e\u0647 3.4.20 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u06cc\u0646\u06a9\u0647 \u0628\u06cc\u0634 \u0627\u0632 \u06f1\u06f0\u06f0 \u0647\u0632\u0627\u0631 \u0646\u0645\u0648\u0646\u0647 UniFi OS \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0647\u0633\u062a\u0646\u062f \u0648 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0633\u0627\u0628\u0642\u0647 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0631\u0627 \u062f\u0627\u0631\u0646\u062f\u060c \u0646\u0635\u0628 \u0641\u0648\u0631\u06cc \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.499106Z"}, {"uuid": "0166bea1-1266-4122-a9f9-961a0d2a853a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PM_FkzO8XLFj_ObpdXkqs", "content": "", "creation_timestamp": "2026-07-16T19:00:15.682352Z"}, {"uuid": "0cfef38a-3ec2-4f99-84f1-f120a96c8f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50747", "type": "seen", "source": "https://bsky.app/profile/hissenit.bsky.social/post/3mqs7c6esfc2y", "content": "*Critical SQL Injection Vulnerability Discovered in Ubiquiti UniFi Talk*\n\nUbiquiti disclosed a critical authenticated SQL injection vulnerability (CVE-2026-50747) affecting UniFi Talk ..\n\nwww.hissenit.com/en/blog/it-s...\n\n#SecureCoding #ApplicationSecurity #AppSec #OWASP #DevSecOps #Java", "creation_timestamp": "2026-07-16T21:42:19.654949Z"}, {"uuid": "50b4654d-7aad-4788-adcf-971e53c98039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "published-proof-of-concept", "source": "Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PM_FkzO8XLFj_ObpdXkqs", "content": "", "creation_timestamp": "2026-07-18T00:00:41.601858Z"}, {"uuid": "b8de9fdb-0ed9-470f-805b-6317d4a872db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50746", "type": "seen", "source": "Telegram/DpmS-MqZcFgA7jw-5Fid6KBzroV5kqNebC2rWcc0pUPu2Q", "content": "", "creation_timestamp": "2026-07-18T13:00:03.903127Z"}, {"uuid": "34f68387-a829-4cad-82bb-5f7c015c7409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3zaum4cl2q", "content": "CVE-2026-50743 - Revive Adserver Cross-Site Request Forgery Vulnerability\nCVE ID : CVE-2026-50743\n \n Published : July 20, 2026, 5:17 p.m. | 26\u00a0minutes ago\n \n Description : A CSRF vulnerability exists in the `zone-include.php` script in Revive Adserver 6.0.7. Linking and unlink...", "creation_timestamp": "2026-07-20T19:20:47.573839Z"}, {"uuid": "9d0bbf2e-eef0-4033-933c-0c11088eb246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "seen", "source": "https://t.me/hacking_Attack/188503", "content": "From a Forgotten htmlspecialchars() to Full Admin Takeover The Story of CVE-2026\u201350740\nhttps://medium.com/@xtkanon/from-a-forgotten-htmlspecialchars-to-full-admin-takeover-the-story-of-cve-2026-50740-fdd38940f5b6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:07.089689Z"}, {"uuid": "c02130c3-a7ac-4443-ae5f-70ae76522458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "seen", "source": "https://t.me/hacking_Attack/188505", "content": "Continue reading on Medium \u00bb (https://medium.com/@xtkanon/from-a-forgotten-htmlspecialchars-to-full-admin-takeover-the-story-of-cve-2026-50740-fdd38940f5b6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:07.130123Z"}, {"uuid": "dab5e994-eb29-4383-a074-0350ee39f9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/188503", "content": "From a Forgotten htmlspecialchars() to Full Admin Takeover The Story of CVE-2026\u201350740\nhttps://medium.com/@xtkanon/from-a-forgotten-htmlspecialchars-to-full-admin-takeover-the-story-of-cve-2026-50740-fdd38940f5b6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:22.251497Z"}, {"uuid": "3f0406f8-dc7d-40a6-9f12-9176d6cfdb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50740", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/188505", "content": "Continue reading on Medium \u00bb (https://medium.com/@xtkanon/from-a-forgotten-htmlspecialchars-to-full-admin-takeover-the-story-of-cve-2026-50740-fdd38940f5b6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:22.196061Z"}]}