Multiple vulnerabilities in the Ubiquiti UniFi Protect Application's discovery protocol allow attackers on an adjacent network to gain unauthorized access to cameras (CVE-2026-21633, CVSS 8.8) or cause a denial-of-service via a buffer overflow that forces an application restart (CVE-2026-21634, CVSS 6.5). The vulnerabilities affect versions up to and including at least 6.1.79, and Ubiquiti has released UniFi Protect Application version 6.2.72 to address these security flaws. [heise.de](https://www.heise.de/en/news/Ubiquiti-UniFi-Protect-Security-vulnerability-allows-access-to-cameras-11131234.html)