--- title: "UniFi USG End of Support: What to Do Next" description: Network 10.6 is the last release supporting the legacy USG. Here is why a permanently unpatched gateway matters, and how we plan the replacement. date: 2026-10-12 updated: 2026-10-13 category: unifi tags: [UniFi, Network, end of support] url: "https://relaypoint.ca/blog/unifi-usg-end-of-support" author: RelayPoint Technologies --- On 18 September Ubiquiti confirmed that UniFi Network 10.6 is the final release compatible with the legacy UniFi Security Gateway lineup. That covers the USG, the USG-Pro and the USG-XG-8, which between them sat in a lot of Ontario homes and small offices for the better part of a decade. Network 11 landed on 12 October. If you own a USG, that release is the end of the road rather than an upgrade. ## What was announced Two things, in the same post, and the second has been getting less attention. The first is the gateway cutoff. Network 10.6 is the last controller version that can manage a USG. Network 11 and everything after it will not. The second is that the standalone self-hosted Network Application is also finished at 10.6. That is the version you run yourself on a Windows box, a Linux server or in Docker. Ubiquiti is pointing that use case at UniFi OS Server instead, and has been clear that self-hosting continues and remains free. It is the old application being retired, not the idea of running your own controller. In our client base, the second item touches more people than the first. ## What it means if you own a USG Nothing broke on 12 October. The risk here is not immediate, it is structural, and it is worth understanding properly. Look at what Ubiquiti has spent this year fixing. In July, security advisory bulletin 066 covered 25 vulnerabilities, seven of them critical, with severity scores at the top of the scale. Seven weeks later, bulletin 067 covered another 22, three of them rated a flat 10.0 out of 10. Between the two they reached UniFi OS, Protect, Access, Talk, Connect and the Network Application, which is to say most of the stack. Two things follow. Ubiquiti is finding and patching serious flaws at a steady clip, and that pipeline is much of what you pay for when you buy their hardware. And your USG is no longer attached to it: whatever turns up next, there will be no fix for your gateway, because there will be no further releases that support it. Be clear about what we are and are not saying here. Neither of this year's bulletins named the USG. We are not telling you there is a known hole in your gateway today, and anyone who tells you otherwise is guessing. What we are saying is that a gateway is the worst device on your network to leave permanently unpatched. It is the one box with an interface facing the open internet, and it decides what reaches everything behind it. The gap between a flaw being published and being exploited keeps getting shorter. For a switch or an access point, running a few versions behind is untidy. For the gateway it means your whole perimeter is frozen, and frozen now means frozen for good. You also lose forward motion, including the traffic visibility we wrote about in [what's new in UniFi Network 11](/blog/unifi-network-11-whats-new). Not an emergency this week. Also not something to still be thinking about next year. ## The controller question If your UniFi controller runs on a computer somewhere, on an old server in the corner, in Docker on a NAS, or on a first-generation Cloud Key, this part applies to you even if your gateway is new. And note which product turned up in August's bulletin: the UniFi Network Application itself. That is the software you are now frozen on if you self-host the retired version, and it is the console that holds the keys to every device on your network. This is the sharper half of the announcement, and it is the half almost nobody is talking about. Staying put also means your controller drifts away from the firmware your newer devices expect, and that mismatch is where the awkward faults come from: devices that adopt but will not provision, settings that save but do not apply. Moving to UniFi OS Server, or onto a current gateway that runs the controller itself, resolves it. Either way it is a migration with a config backup, a restore and a verification pass, not something to improvise on a Tuesday evening. Our approach to update sequencing is in [how we handle UniFi updates](/blog/how-we-handle-unifi-updates), and the same caution applies here. ## What replaces a USG Ubiquiti's gateway range is far broader than it was when the USG was the only sensible choice, and picking from a spec sheet is how people end up with the wrong one. Roughly how we think about it. For most homes and small offices a compact cloud gateway is the honest answer, and it does more than the USG did in less space. Where there is fibre into the building, there is a model built around that. Where you want cameras recording on the same box, the rack-mount Dream Machine models are the place to look. Larger sites with real throughput requirements have their own tier above that. The gateway is also rarely the only thing worth looking at. A USG that old usually sits alongside switches and access points of the same vintage, and sometimes a wiring cupboard that was tidy in 2017. We would rather look at the whole picture once than replace one box and come back twice. If you are rebuilding anyway, [what a small office network looks like in 2026](/blog/small-office-network-2026) covers the shape of it. ## How we handle it For clients on a [UniFi managed services plan](/services/support/unifi-managed-services), this is our problem rather than yours. We already know what hardware is on your sites and which controllers are on the retired application, and we are working through the list and scheduling replacements in maintenance windows before anything becomes urgent. If you look after your own network, or inherited one and are not certain what is in it, the first step is an inventory: what you have, what is actually affected, and in what order it should move. Sometimes the answer is that you have two years of life left and should do nothing yet. We would rather tell you that than sell you a box. We are not going to put replacement pricing in a blog post, because it depends on what is already in your cupboard, how your [office network](/services/connect/office-network-setup) is laid out and whether the cabling is worth keeping. Everything is quoted in writing before work starts. If you would rather do the migration yourself, Josh covers the hands-on steps on [his own site](https://joshdargie.com). We cover [Norfolk, Oxford, Brant and Haldimand counties plus Hamilton, Burlington and Oakville](/areas). If you think you have a USG or an old self-hosted controller, [get in touch](/contact) and we will tell you where you stand. ## Sources - [UniFi Network 10.6: Final Release for Legacy USG Gateways and the Standalone Network Application](https://community.ui.com/questions/UniFi-Network-10-6-Final-Release-for-Legacy-USG-Gateways-and-the-Standalone-Network-Application-or-/54a8e1dd-4210-47a4-86a5-572e40854fd0) (Ubiquiti, 18 September 2026) - [UniFi Network Application 11.0.83](https://community.ui.com/releases/UniFi-Network-Application-11-0-83/d6940379-cd5a-4e61-8596-7e22d647a4ea) (Ubiquiti, 12 October 2026) - [Self-Hosting UniFi](https://help.ui.com/hc/en-us/articles/34210126298775-Self-Hosting-UniFi) (Ubiquiti) - [Multiple Vulnerabilities Impacting a Wide Range of Ubiquiti Products](https://www.caloes.ca.gov/wp-content/uploads/CSIC_Cyber_Advisory-Multiple-Vulnerabilities-Impacting-Wide-Range-of-Ubiquiti-Products.pdf) (California Office of Emergency Services, 9 July 2026) - [Ubiquiti Releases Security Advisory Bulletin for Multiple Critical Vulnerabilities in UniFi Products](https://digital.nhs.uk/cyber-alerts/2026/cc-4837) (NHS England Digital, 27 August 2026)