Hackers are using critical Ubiquiti UniFi OS flaws to take over vulnerable devices. Here’s how to update your device and why waiting could put home or business networks at risk.
Table of Contents
What Happened?
The attacks affect routers, gateways, video recorders, and other network devices.
CISA — the US cybersecurity agency — warned that criminals are already using three serious security flaws in real attacks.
Ubiquiti released fixes on May 21, 2026. CISA later told federal agencies to install the updates by June 26.
Which UniFi Devices Are at Risk?
The flaws affect several Ubiquiti products running older software.
These include some Dream Machine routers, Cloud Gateways, video recorders, Cloud Keys, UniFi Express devices, and network storage products.
The affected software version depends on the device.
The easiest step is to check for the latest stable update instead of comparing long lists of version numbers.
Ubiquiti and CISA have not said personal data was leaked.
However, taking control of a router or network device can still create serious problems. Attackers may change settings, reach files, or use the device for other cyberattacks.
That makes device security important, while data leaks from unrelated incidents remain another problem to watch.
Many people do not know their information was leaked elsewhere until suspicious activity appears.
If you are not sure whether your information was leaked, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
How Hackers Take Over Vulnerable UniFi Devices
The attackers look for UniFi devices that are connected to the internet and still use older software.
Once they find one, they can use the security flaws to gain control.
Researchers saw attackers install Mirai malware — harmful software that can turn a device into part of a larger attack network.
That network is called a botnet. It is simply a group of infected devices controlled by criminals.
In other words, a vulnerable router may keep working normally while someone else secretly uses it.
Futureproof scans your data for leaks and shows exactly how to close security gaps — before scammers find them first.
Check my safetyWhat This Means for Your Home or Business Network
Routers and other network devices often work quietly in the background.
That makes them easy to forget when it is time to install updates.
However, these devices connect many parts of your network. That means one unpatched device (a device missing important security updates) can create a wider security problem.
The FBI has also warned that criminals are using old routers that no longer receive security updates. This shows why keeping network equipment current matters.
Update your router and network equipment just as you update your phone or computer.
CISA’s warning also shows that waiting matters because hackers are already using these flaws.
3 Steps to Protect Your UniFi Router or Network Device
These simple steps can help protect your network device:
1. Update the software on your UniFi device now
Check whether your UniFi device has an update waiting.
Older software may still contain the security flaws attackers are using.
Open your UniFi settings and go to Control Plane > Updates.
Install the latest stable update available for your device.
2. Turn on automatic updates
Check whether automatic updates are turned off.
Without them, important security fixes can sit waiting while attackers search for vulnerable devices.
Go to Settings > Control Plane > Updates and turn on automatic updates.
This helps your device receive future fixes more easily.
3. Get help if your device has not been updated for a long time
Pay extra attention to devices that stay connected to the internet while running old software.
Attackers may work quietly, so you may not notice anything unusual.
Update the device first. Then ask your network provider or a trusted technician to check it if you are concerned.
Your Router Needs Security Updates Too
Routers and network devices are easy to forget because most people rarely think about them after setup.
However, they still run software, and old software can give attackers a way in.
Keep your UniFi device updated, turn on automatic updates, and ask for help when an older system may have stayed vulnerable.
Futureproof can also help you spot data leaks elsewhere before suspicious activity catches you by surprise.
Remember: simple updates and early warnings like these can help you stay safer and feel more in control online.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
