[ Vendor · 4 CVEs ]
Ubiquiti
CVEs affecting Ubiquiti published in the last 30 days, plus any Ubiquiti CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-34908 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Improper Access ControlA malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized… | ExploitedFix |
| CVE-2026-34909 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Path TraversalA malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying… | ExploitedFix |
| CVE-2026-34910 | 22 May 2026 | CVSS 10.0 | Ubiquiti UniFi OS Improper Input ValidationA malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command… | ExploitedFix |
| CVE-2010-5330 | 11 Jun 2019 | CVSS 9.8 | Ubiquiti AirOS Command InjectionOn certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not… | ExploitedFix |