Security update: We discovered CVE-2026-54405 (CVSS 7.5). Ubiquiti has patched it—update UniFi Network to 10.4.57 or later.

Read the advisory

IP Access Control

IP Access Control is now included on all plans because security should not be a paid feature.

Add your allowlist

Your allowlist is deny-by-default. Once you save at least one rule, all other traffic is blocked. Add every Dashboard, Device inform, and Guest portal range you need before saving.

  1. Open Servers, choose your controller, and select IP access control.
  2. Add the IP you are currently using—or your office CIDR range—to Dashboard first, so you keep access after saving. The required ports are added automatically.
  3. Add the ranges used by your UniFi devices to Device inform so adoption and reporting continue working.
  4. Leave Guest portal without rules to keep that public endpoint closed, unless you actively use a hotspot portal.
  5. Select Save rules. Rollout can take about a minute.

Dashboard and device inform allowlist rules

Dashboard and device inform allowlist rules

Choose what stays public

  • Dashboard controls the web interface and admin API.
  • Device inform controls device adoption and reporting on TCP 8080.
  • Guest portal controls hotspot portal endpoints. Only add a range when guests need to reach them.

Adding an allowed IP range for the Guest portal

Adding an allowed IP range for the Guest portal