Ubiquiti issued critical security CVEs affecting UniFi Protect, while rolling out initial firmware for the UniFi Travel Router Long-Range and SuperLink Recessed Entry Sensor.
The first week of September brought important security disclosures alongside new hardware firmware releases within the Ubiquiti ecosystem. Most notably, two critical command injection vulnerabilities affecting UniFi Protect were indexed for remediation, while new firmware distributions marked the emergence of new network and physical security hardware. Facilities and IT leaders should prioritize verifying their Protect deployments and review the latest hardware options.
Security Advisories
- UniFi Protect Command Injection Vulnerabilities (CVE-2026-77533 & CVE-2026-77548): Disclosed with critical CVSS base scores of 9.9, these improper input validation flaws allow an attacker with local network access and low privileges to execute command injection on the host surveillance console. Ubiquiti's Security Advisory Bulletin 067 (August 26, 2026) lists the fix in UniFi Protect 7.2.105. For commercial, healthcare, and hospitality operators, this reinforces the urgent operational requirement to isolate physical security consoles onto dedicated, access-controlled management VLANs and maintain current software builds.
UniFi Network
- UniFi Travel Router Long-Range Firmware 6.6.117: Ubiquiti released initial hardware firmware for the UniFi Travel Router Long-Range, establishing baseline compatibility requiring UniFi mobile app versions iOS 10.37.1 or Android 10.39.7. For distributed enterprises and executive hospitality staff, this introduces a managed, high-coverage portable gateway option for secure remote tunneling back to corporate infrastructure.
UniFi Protect
- UniFi Protect SuperLink Recessed Entry Sensor 1.0.1: Initial firmware support has been released for the USL-Entry-R recessed door and window sensor. For facility and security managers, concealed sensors allow discreet perimeter monitoring in design-sensitive hospitality spaces and access-controlled healthcare environments without visible hardware on door frames.
- UniFi Protect Android 3.8.2: A maintenance release rolled out across Android endpoints to enhance the UniFi OS update process from mobile devices. This streamlines administrative oversight for security and facilities personnel managing site video infrastructure from mobile devices.
Nexus Communications Technology evaluates new UniFi hardware releases and firmware updates before deploying them into production client environments. Contact our engineering team today to schedule a comprehensive UniFi360 network and security assessment for your facility.
Get ICT insights for Illinois facilities
Practical guidance on nurse call, managed networking, and security — delivered monthly.
Keep your next technology decision informed.
Nurse call, UniFi, security, and building technology insights from Nexus. Read at your pace, unsubscribe anytime.
Let's talk about your project.
Bring your facility goals and existing systems. We'll help define the right scope, next steps, and ongoing support options.
