A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart.
Affected Products:
UniFi Protect Application (Version 6.1.79 and earlier).
Mitigation:
Update your UniFi Protect Application to Version 6.2.72 or later.
References
| Link | Resource |
|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9 | Vendor Advisory |
Configurations
History
30 Jan 2026, 01:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ui
Ui unifi Protect |
|
| References | () https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9 - Vendor Advisory | |
| CPE | cpe:2.3:a:ui:unifi_protect:*:*:*:*:*:*:*:* |
05 Jan 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 |
05 Jan 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-05 17:15
Updated : 2026-01-30 01:23
NVD link : CVE-2026-21634
Mitre link : CVE-2026-21634
CVE.ORG link : CVE-2026-21634
JSON object : View
Products Affected
ui
- unifi_protect
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer