Ubiquiti ha rilasciato aggiornamenti di sicurezza per sanare 4 vulnerabilità con gravità “alta” in diversi prodotti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati, di ottenere privilegi elevati o di compromettere la disponibilità del servizio sui sistemi interessati.
Ubiquiti ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "alta", in UniFi Protect AI Key, componente della piattaforma di videosorveglianza IP UniFi Protect. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante remoto di eseguire codice arbitrario e compromettere la disponibilità del servizio sui sistemi interessati.
Classification: Important, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 7.5, CVEs: CVE-2026-77544, CVE-2026-77555, CVE-2026-77556, CVE-2026-77558, CVE-2026-95861, CVE-2026-95862, Summary: Ubiquiti has corrected six vulnerabilities affecting current UniFi gateway devices. An attacker with network access to an affected device can exploit the vulnerabilities to cause a denial-of-service condition and interrupt network connectivity. The affected product families include Dream…
Serial number: AV26-954Date: September 23, 2026 As of September 22, 2026, Ubiquiti Inc is affected by vulnerabilities in the following products: Cloud Gateways Prior to 5.1.31 Dream Machines Prior to 5.1.31 Dream Routers Prior to 5.1.31 Dream Wall Prior to 5.1.31 Enterprise Firewalls Prior to 5.1.31 Express Prior to 4.0.21 Express 7 Prior to 5.1.31 UniFi Gateways Prior to 5.1.26 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates…
For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, vehicle registration numbers, and information collected through car park, lounge, fast-track, and Wi-Fi…