CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ubiquiti UniFi OS Remote Command Injection Vulnerability (CVE-2026-34910) Security Advisory
[Affected Scope] All network-accessible Ubiquiti UniFi OS devices
[Impact] Unauthenticated remote attackers can exploit an Improper Input Validation vulnerability (CWE-20) to execute arbitrary commands with root privileges, potentially recruiting devices into botnets (e.g., Mirai)
[Mitigation] Immediately apply the official vendor security patches and restrict external internet access to the UniFi OS management interface
GeoVision End-of-Life (EOL) IP Cameras and Video Servers OS Command Injection Vulnerability (CVE-2024-6047) Technical Advisory
[Affected Scope] End-of-Life (EOL) GeoVision devices including GV-VS12, GV-VS11, and GV-DSP LPR V3
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, potentially leading to full device takeover and integration into IoT botnets like Mirai
[Mitigation] Since these devices are EOL and no official patches are available, immediately isolate the affected devices from the internet or replace them with supported models