Ubiquiti vulnerabilities being exploited
3 Ubiquiti flaws were confirmed exploited in the wild in the past 365 days, across 1 product: UniFi OS. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-06-23 | CVE-2026-34910 UniFi OS Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection. | 2026-06-26 |
| 2026-06-23 | CVE-2026-34909 UniFi OS Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account. | 2026-06-26 |
| 2026-06-23 | CVE-2026-34908 UniFi OS Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system. | 2026-06-26 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.