CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-05-22
Ubiquiti UniFi OS Remote Command Injection Vulnerability (CVE-2026-34910) Security Advisory
[Affected Scope] All network-accessible Ubiquiti UniFi OS devices
[Impact] Unauthenticated remote attackers can exploit an Improper Input Validation vulnerability (CWE-20) to execute arbitrary commands with root privileges, potentially recruiting devices into botnets (e.g., Mirai)
[Mitigation] Immediately apply the official vendor security patches and restrict external internet access to the UniFi OS management interface