Critical Ubiquiti UniFi UniFi security flaw allows potential account hijacking

Security Affairs

March 19, 2026 at 9:21 PM

Overview

Ubiquiti has addressed two vulnerabilities in its UniFi Network app, one of which is particularly serious and could allow attackers to take control of user accounts. This software is commonly used to manage various networking devices such as access points, switches, and gateways. The critical flaw poses a significant risk as it could lead to unauthorized access to sensitive user information and network settings. Users of UniFi products are urged to apply the latest patches to protect their systems. This incident serves as a reminder of the importance of keeping software up-to-date to mitigate potential security risks.

Key Takeaways

Affected Systems: Ubiquiti UniFi Network app, UniFi networking devices (access points, switches, gateways)
Action Required: Users should apply the latest patches provided by Ubiquiti to secure their systems.
Timeline: Disclosed on [date not specified]

Original Article Summary

Ubiquiti fixed two UniFi vulnerabilities, including a critical flaw that could let attackers take over user accounts. Ubiquiti patched two vulnerabilities in its UniFi Network app, including a maximum-severity flaw that could enable account takeover. The software is widely used to manage UniFi networking devices like access points, switches, and gateways. The Ubiquiti UniFi Network […]

Impact

Ubiquiti UniFi Network app, UniFi networking devices (access points, switches, gateways)

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Disclosed on [date not specified]

Remediation

Users should apply the latest patches provided by Ubiquiti to secure their systems.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Critical.

Read Original Article

Related Coverage

AI Conundrum: Why MCP Security Can't Be Patched Away

darkreading

At the RSAC 2026 Conference, a researcher raised alarms about the security risks associated with MCP (Multi-Cloud Platform) in large language model (LLM) environments. They explained that these risks are rooted in the architecture of MCP itself, making them difficult to address with simple patches or updates. This situation poses a significant challenge for organizations utilizing LLMs, as they may inadvertently expose sensitive data or systems to attackers. The implications are serious, affecting not just the integrity of the models but also the security of the broader infrastructure that supports them. Companies using MCP need to reassess their security frameworks to mitigate these inherent vulnerabilities.

Mar 19, 2026

Aura customer data exposed in voice phishing attack

SCM feed for Latest

Aura, a digital security company, has reported a data breach linked to a voice phishing attack that compromised customer information. The exposed data originated from a marketing tool that Aura acquired in 2021. While specific details about the type of data exposed have not been disclosed, the incident raises concerns about the safety of customer data and the potential for further exploitation by cybercriminals. Users affected by this breach should be vigilant for phishing attempts and other suspicious activities. This incident highlights the ongoing risks associated with third-party tools and the importance of robust security measures for customer data protection.

Mar 19, 2026

IP KVM device vulnerabilities pose significant network risks

SCM feed for Latest

Researchers from Eclypsium have identified vulnerabilities in four different IP KVM devices: GL-iNet Comet RM-1, Angeet/Yeeso ES3 KVM, Sipeed NanoKVM, and JetKVM. These security flaws allow unauthorized users to gain root access or run malicious code without authentication. This situation poses a serious risk to networks utilizing these devices, as attackers could potentially manipulate connected systems. It’s crucial for users of these products to be aware of these vulnerabilities and take necessary precautions to secure their networks. The discovery emphasizes the need for regular security assessments and updates for devices that manage critical network functions.

Mar 19, 2026

ConnectWise warns of critical ScreenConnect vulnerability

SCM feed for Latest

ConnectWise has issued a warning about a serious vulnerability in its ScreenConnect software. This flaw allows attackers to extract ASP.NET machine keys, which could lead to unauthorized access to user sessions. Organizations using ScreenConnect could be at risk, as this vulnerability enables attackers to bypass authentication controls. Users should be aware of the potential for misuse of their systems and take immediate action to protect their data. It is crucial for affected parties to stay updated on this issue and implement necessary safeguards to prevent exploitation.

Mar 19, 2026

Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers

The Hacker News

Researchers have identified a new malware called Speagle that exploits a legitimate software, Cobra DocGuard, to steal sensitive data. The malware takes control of the program's infrastructure, allowing attackers to collect information from infected computers without detection. This data is then sent to a compromised server associated with Cobra DocGuard, making the exfiltration process appear legitimate. Organizations using Cobra DocGuard should be particularly vigilant, as this malware specifically targets its users. The incident raises concerns about the security of trusted software and the potential for attackers to manipulate legitimate tools for malicious purposes.

Mar 19, 2026

Feds keep eyes peeled for Iran cyberattacks, respond to Stryker breach

CyberScoop

U.S. officials are on alert for potential cyberattacks from Iran, particularly following recent geopolitical tensions. Although there hasn't been a noticeable increase in attacks so far, experts from the Department of Defense and CISA are closely monitoring the situation. In a related incident, the federal government has responded to a breach involving Stryker, a medical technology company. While specific details about the Stryker breach are limited, it emphasizes the ongoing risks that critical infrastructure and healthcare sectors face from cyber threats. The situation serves as a reminder for organizations to bolster their cybersecurity measures and remain vigilant against potential attacks.

Mar 19, 2026