A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to ex…

A high-severity vulnerability (CVE-2026-50748) has been identified in the UniFi Access Application. The flaw stems from Improper Input Validation, allowing a malicious actor with low privileges and network access to exploit a Command Injection weakness. Successful exploitation enables the attacker to execute arbitrary commands on the host device. The vulnerability poses significant risk to organizations using UniFi Access for physical access control management. Ubiquiti has published a Security Advisory Bulletin (066) addressing this issue. The low privilege requirement lowers the barrier for exploitation, making this a critical concern for network administrators. Patching or mitigating the vulnerability promptly is strongly recommended.