MSRXMSRXSecurity
Vendors / Ubiquiti

Ubiquiti vulnerabilities being exploited

3 Ubiquiti flaws were confirmed exploited in the wild in the past 365 days, across 1 product: UniFi OS. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-06-23CVE-2026-34910 UniFi OS
Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.

2026-06-26
2026-06-23CVE-2026-34909 UniFi OS
Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.

2026-06-26
2026-06-23CVE-2026-34908 UniFi OS
Ubiquiti UniFi OS Improper Access Control Vulnerability

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.

2026-06-26

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.