CVE-2026-21634
📋 TL;DR
An attacker on the same network can crash the UniFi Protect Application by sending specially crafted discovery protocol packets. This affects all UniFi Protect Application installations running version 6.1.79 or earlier.
💻 Affected Systems
- UniFi Protect Application
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Persistent denial of service preventing camera monitoring and recording, potentially creating security blind spots.
Likely Case
Temporary service disruption requiring manual restart, causing gaps in surveillance coverage.
If Mitigated
No impact if patched to version 6.2.72 or later.
🎯 Exploit Status
Exploitation requires network access but no authentication.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 6.2.72 or later
Vendor Advisory: https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9
Restart Required: Yes
Instructions:
1. Backup current configuration
2. Download UniFi Protect Application version 6.2.72 or later from UI.com
3. Install the update following vendor instructions
4. Restart the UniFi Protect service
🔧 Temporary Workarounds
Network Segmentation
allIsolate UniFi Protect Application on separate VLAN to limit adjacent network access
🧯 If You Can't Patch
- Segment UniFi Protect network from untrusted devices
- Implement network monitoring for unusual discovery protocol traffic
🔍 How to Verify
Check if Vulnerable:
Check UniFi Protect Application version in web interface or via SSH: show versionCheck Version:
ssh admin@unifi-protect-host 'show version' or check web interfaceVerify Fix Applied:
Confirm version is 6.2.72 or later and service remains stable during normal operation📡 Detection & Monitoring
Log Indicators:
- UniFi Protect service restart logs
- Discovery protocol error messages
- Unexpected process termination
Network Indicators:
- Unusual UDP traffic on discovery protocol ports
- Repeated service restart patterns
SIEM Query:
source="unifi-protect" AND (event="service_restart" OR event="crash")