Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-50747: UniFi Talk App Privilege Escalation Risk
CVE-2026-50747
CVE-2026-50747
Summary
A hacker with network access and limited rights can use weaknesses in the UniFi Talk App to gain more control over the device. This could lead to sensitive data being accessed or modified. UniFi users should update their app to the latest version to minimize this risk.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ubiquiti inc | unifi talk application | < 5.2.2 |
Original title
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the h...
Original description
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.
mitre CVSS3.1
9.9
Vulnerability type
CWE-89
SQL Injection
Published: 2 Jul 2026 · Updated: 20 Jul 2026 · First seen: 2 Jul 2026