UniFi OS scores a perfect 10.0 RCE, ConnectWise Automate agents can't verify their own updates

An authenticated user on a ManageEngine agent machine can get remote code execution through a vulnerable third-party dependency in ADSelfService Plus, DataSecurity Plus, or RecoveryManager Plus. The attacker needs valid credentials, but once authenticated, they can run arbitrary code on the agent. CVSS 8.4, no known exploitation yet.

Affected estate

Anyone running ManageEngine ADSelfService Plus before build 6525, DataSecurity Plus before build 6264, or RecoveryManager Plus before build 6313

How to check

Log into each ManageEngine console and check the build number under Settings > Product Info. Also inventory agent versions on endpoints.

Included because

authenticated RCE; agents deployed broadly; common enterprise product

Action

Upgrade each product to the fixed build from ManageEngine's download center and push updated agents.

Why it matters

Any authenticated user can execute arbitrary code on agent machines, which are typically deployed across your entire fleet.

Source

Zohocorp ManageEngine advisory

LiteLLM before 1.83.10 lets any authenticated user promote themselves to proxy_admin by calling the /user/update endpoint with a modified user_role field. Once promoted, they have full admin access to every user, API key, model config, and prompt history in the platform. Users with the org_admin role can do this without any extra exploit chain.

Affected estate

Teams running LiteLLM proxy before version 1.83.10, especially multi-tenant or org-scoped deployments

How to check

Check your LiteLLM version with `litellm --version` or inspect your container image tag. Review the user table for unexpected proxy_admin entries.

Included because

trivial privilege escalation; no special conditions; exposes sensitive data and keys

Action

Upgrade to LiteLLM 1.83.10+ and audit all user roles for signs of privilege escalation.

Why it matters

A low-privilege user can silently become a full admin, exposing all API keys, model configs, and prompt history across your entire LiteLLM deployment.

Source

LiteLLM GitHub advisory

The ConnectWise Automate agent doesn't fully verify that plugins and self-update payloads are authentic. An attacker with network access (for example, through a man-in-the-middle position or compromised update source) could swap in a malicious component. Since Automate agents run with SYSTEM privileges on managed endpoints, this is a serious supply-chain risk. CVSS 8.8, no known exploitation yet.

Affected estate

MSPs and IT teams running ConnectWise Automate agents on managed endpoints, prior to Automate 2026.5

How to check

In the Automate Control Center, check Help > About for the server version. On endpoints, check the Automate agent version in Add/Remove Programs or via the agent tray icon.

Included because

supply-chain vector; agents run as SYSTEM; widely deployed by MSPs; high CVSS

Action

Upgrade the Automate server to 2026.5 and confirm all agents pull the updated version.

Why it matters

Automate agents run as SYSTEM on every managed machine. A forged update could give an attacker code execution across your entire managed fleet.

Source

ConnectWise advisory

This is as bad as it gets. A network-reachable attacker can exploit an input validation failure on UniFi OS devices to inject and execute arbitrary commands, no authentication required. CVSS 10.0. If your UniFi gear is internet-facing or reachable from an untrusted network, treat this as an emergency.

Affected estate

Anyone running UniFi OS devices (Dream Machine, Dream Router, Cloud Gateway, NVR, or other UniFi consoles) reachable from untrusted networks

How to check

Log into each UniFi console's Settings > System and check the UniFi OS version. Also run a network scan to identify any UniFi devices exposed on public IPs.

Included because

unauthenticated; network-reachable; CVSS 10.0; common network infrastructure; command injection

Action

Apply the latest UniFi OS firmware immediately. If you can't patch right now, firewall off management interfaces from untrusted networks.

Why it matters

Unauthenticated command injection at the OS level on your network gateway means full device takeover and potential pivot into your entire network.

Source

Ubiquiti security advisory