Update when we say adopt. Skip when we say skip.
Every UniFi release runs on our bench before it gets a verdict here. “Newest” and “best” are occasionally different answers — this page is the difference, kept current.
What to run today
One row per product line: the version we recommend right now, and what we think of the latest release if it's different.
| Product line | Run this | Latest release | Verdict | Bench notes |
|---|---|---|---|---|
| UniFi NetworkCONTROLLER APPLICATION | 9.3.45 | 9.3.45 · 2026-06-02 | ADOPT | Zone-based firewall profiles land cleanly; both VPN fixes verified. Check your WAN failover setting after updating — it resets to default. |
| UniFi OS · Cloud GatewaysUCG-ULTRA / FIBER / UDM | 4.2.9 | 4.3.0 · 2026-06-06 | HOLD | 4.3.0 adds the multi-WAN dashboard but two units on our bench dropped IPv6 after 48 hours. Holding until the point release; 4.2.9 is solid. |
| Access point firmwareU7 SERIES · WI-FI 7 | 7.1.22 | 7.1.22 · 2026-05-28 | ADOPT | MLO stability is the headline — week-long soak with zero band-steer flaps. Worth updating for; 6 GHz roaming is visibly smoother. |
| Switch firmwareLITE & PRO MAX SERIES | 7.0.50 | 7.0.50 · 2026-05-14 | ADOPT | Quiet maintenance release. PoE budget reporting now matches our meter within 1 W — the calculator's numbers assume this version. |
| UniFi ProtectCAMERAS & NVR | 6.0.34 | 6.1.0 · 2026-05-06 | SKIP | 6.1.0 regresses smart detections on G5-series cameras — reproduced on three units, confirmed by others. Stay on 6.0.34 until 6.1.x fixes it; we'll move this row the day it does. |
Verdicts cover the hardware we stock, configured the way we ship it. Exotic topologies — layer-3 switching, multi-site VPN meshes — deserve a question to support before any major version jump.
How to update without drama
The procedure we use on customer networks. Boring on purpose — boring is the goal.
Settings → System → Backups, download one locally. Thirty seconds of insurance against the rare bad flash.
Network application first, then gateway, then switches, then APs. Downstream gear updating before the controller is how adoption loops start.
Each device reboots once. On a home network that's two quiet minutes; pick the two minutes nobody's on a call.
Controversial, but: this page exists because day-one releases occasionally bite. Update deliberately, on the verdicts above.
The dispatch carries every verdict flip.
When a HOLD becomes an ADOPT — or a release turns out to deserve a SKIP — the dispatch email goes out the same day. About two emails a month, only when there's signal.