#unifios — Public Fediverse posts

Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now.

#Ubiquiti #UniFi #UniFiOS #UniFiProtect #CommandInjection #CyberSecurity

https://securityonline.info/unifi-security-advisory-066/?utm_source=mastodon&utm_medium=jetpack_social

Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now.

#Ubiquiti #UniFi #UniFiOS #UniFiProtect #CommandInjection #CyberSecurity

https://securityonline.info/unifi-security-advisory-066/?utm_source=mastodon&utm_medium=jetpack_social

🚨 CRITICAL: Ubiquiti UniFi OS Server hit by CVE-2026-47370 (CVSS 9.9). Low-priv users can exploit improper input validation for command injection. No patch yet — restrict access, monitor logs. Details: https://radar.offseq.com/threat/cve-2026-47370-cwe-20-improper-input-validation-in-1af657c9 #OffSeq #Vulnerability #UniFiOS #Security

UniFi OS Bug Lets Hackers Gain Root Without Authentication

A critical bug in UniFi OS can be exploited by hackers to gain root access without any login credentials, user interaction, or prior access, putting your system at risk. Three vulnerabilities, now patched, can be chained together to allow remote code execution with root privileges.

https://osintsights.com/unifi-os-bug-lets-hackers-gain-root-without-authentication?utm_source=mastodon&utm_medium=social

#UnifiOs #Cve202634908 #Cve202634909 #Cve202634910 #RootShell

Ubiquiti Fixes Maximum-Severity UniFi OS Flaws

Ubiquiti has patched three critical vulnerabilities in UniFi OS that left nearly 100,000 Internet-exposed endpoints, including 50,000 in the US, open to remote attacks without requiring login credentials. The fixes address severe flaws that could allow unauthorized system changes, file access, and even command injection.

https://osintsights.com/ubiquiti-fixes-maximum-severity-unifi-os-flaws?utm_source=mastodon&utm_medium=social

#Ubiquiti #UnifiOs #Cve202634908 #Cve202634909 #Cve202634910

🚨 CVE-2026-33000 (CVSS 9.1): Ubiquiti UniFi OS Server has a critical improper input validation flaw. High-privileged attackers on the network can execute command injection. Mitigation steps not published yet. Stay tuned: https://radar.offseq.com/threat/cve-2026-33000-cwe-20-improper-input-validation-in-983d26ac #OffSeq #Infosec #UniFiOS

Made it to the other side! Didn't notice before that my small local ISP got the icon in the UI, very cool!
#UnifiOS #selfhosting #selfhost #homelab #unifi #network #fiber

Made it to the other side! Didn't notice before that my small local ISP got the icon in the UI, very cool!
#UnifiOS #selfhosting #selfhost #homelab #unifi #network #fiber

Time for some #UnifiOS updates... Worse possible thing to update, the router. Hate that level of stress.

Time for some #UnifiOS updates... Worse possible thing to update, the router. Hate that level of stress.

Ubiquiti propose d’installer gratuitement UniFi OS au complet sur n’importe quel serveur http://dlvr.it/TMHbzd #Ubiquiti #UniFiOS

Ubiquiti propose d’installer gratuitement UniFi OS au complet sur n’importe quel serveur http://dlvr.it/TMHbzd #Ubiquiti #UniFiOS

I'm the proud owner of three GE fridges.

Haha... as if.

My Home Assistant Voice PE devices show up as GE fridges in UniFi OS.

#HomeAssistant #Ubiquiti #UniFiOS #HomeAssistantVoicePE

I'm the proud owner of three GE fridges.

Haha... as if.

My Home Assistant Voice PE devices show up as GE fridges in UniFi OS.

#HomeAssistant #Ubiquiti #UniFiOS #HomeAssistantVoicePE

#Unifi has improved their #UDM DNS implementation significantly. There is DoT/DoH upstreaming and ad blocking.

I decided to give it a try and see how it compares to Pi-Hole.

It has an extensive blocklist by default, but just for tinkering's sake I changed to a custom blocklist following https://frankgroenewoud.nl/oisd-ads-blocking-on-ucg-54b34233ed34 .

It needed some more tweaking with boot scripts:
- Add ipv6 ULA address to LAN interface, so that internal network has a fixed internal address to their ipv6 DNS.
- Add DNS conditional forwarding to internal Windows domain controllers.
- Add a delay to DHCP responses so it acts only as a backup for Winserver DHCPs.
- Inject blocklist updating to cron.

With https://github.com/unifi-utilities/unifios-utilities/tree/main/nspawn-container the customizations survive reboots. This is #UnifiOS v4, so the old boot scripts based on Podman do not work.

So, it's almost comparable to Pi-Hole. UDM can't do regex filtering. There is no support for internal DNS, although it can be added with boot scripts.
#homelab #DNS #DNSMasq #DHCP

Still alive! :D #unifiOS #selfhost #selfhosting #unifi

Still alive! :D #unifiOS #selfhost #selfhosting #unifi

Time to update to the latest version of #unifiOS. See you on the other side!

#selfhost #selfhosting #unifi

Time to update to the latest version of #unifiOS. See you on the other side!

#selfhost #selfhosting #unifi

Regular updates are important! #unifi #udm pro special edition

#10G #network #security #unifios

Regular updates are important! #unifi #udm pro special edition

#10G #network #security #unifios