Critical UniFi OS bug lets hackers gain root without authentication

Published on June 8, 2026

Attackers can chain three already fixed vulnerabilities in the Ubiquiti UniFi OS server to execute remote code with root privileges and without authentication. [...]

Continue reading on website
Other news

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

June 8, 2026
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.The vulnerability, tracked as CVE-2026-50751 (CVSS score: 9.3), is a case of a logic flow weakness in certificate validation that allows an unauthenticated remote attacker to bypass user

Gogs patches critical zero-day enabling remote code execution

June 8, 2026
Gogs has patched a critical security zero-day flaw that can allow attackers to compromise Internet-facing instances and access any repositories (including private ones). [...]