ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Product

UniFi OS

0 mentions in 7 days · 3 in 30 days · 3 total · first seen · last

Search everything

Timeline

CVE-2026-34908: UniFi OS Auth Bypass Vulnerability

Ubiquiti disclosed CVE-2026-34908, a CVSS 10.0 authentication bypass in UniFi OS letting network-adjacent attackers alter device configuration without credentials.

CVE-2026-34908 is an improper access control flaw (CWE-284) in Ubiquiti UniFi OS devices, disclosed in UI Security Advisory Bulletin 064, with a CVSS 3.1 base score of 10.0. An unauthenticated network-adjacent attacker can bypass access controls and modify system configuration, with scope-changed impact on downstream network services such as routing, VPN, and connected access points. Fixed firmware is available, and workarounds include restricting management ports to trusted subnets, isolating management interfaces on a dedicated VLAN, and disabling remote access features. No public proof-of-concept code was observed at the time of publication.

Web discovery (articles for new exploits & KEV entries) · 7d agoVulnerabilityCVE-2026-34908

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

CISA added CVE-2026-34908 to the Known Exploited Vulnerabilities catalog on June 23, 2026, with remediation due June 26 under BOD 26-04 guidance. The CVSS 10.0 improper access control flaw (CWE-284) in Ubiquiti UniFi OS allows unauthorized system changes without authentication. Multiple news reports referenced by the page describe the max-severity UniFi flaws being exploited in attacks, and an official patch is available.

Web discovery (articles for new exploits & KEV entries) · 8d agoExploit / PoC in the wildCVE-2026-34908

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910: Ubiquiti UniFi OS ...

Ubiquiti UniFi OS flaws CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV, chaining auth bypass into command injection.

Ubiquiti UniFi OS vulnerabilities CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV catalog. CVE-2026-34908 (CVSS 10.0, CWE-284) is an unauthenticated improper access control flaw allowing unauthorized system changes, described as the initial entry point. It enables attackers to then leverage chained path traversal and command injection flaws for deeper compromise.

Web discovery (articles for new exploits & KEV entries) · 14d agoExploit / PoC in the wildCVE-2026-34908CVE-2026-34909CVE-2026-34910

Related CVEs

  • CVE-2026-3490810.085%
    Improper Access Control in Ubiquiti UniFi OS Devices (CVE-2026-34908)
    CVE-2026-34908 is an improper access control flaw (CWE-284) in Ubiquiti UniFi OS, the operating system running on UniFi gateways, Dream Machine appliances, and UniFi network video recorders. An attacker who can reach the device over the network — with no privileges or user interaction required per the CVSS vector — can make unauthorized changes to the system. The CVSS 3.1 score of 10.0 with a changed scope (S:C) indicates a successful attack can compromise the device beyond its intended security boundary, with high impact to confidentiality, integrity, and availability. Any organization running the affected UniFi OS products, including UniFi OS Server and the Dream Machine, Cloud Gateway, Enterprise Fortress, Dream Router, Express, and UNVR lines, is affected; specific vulnerable and fixed firmware versions are not specified in the available data. CISA added the flaw to the Known Exploited Vulnerabilities catalog on 2026-06-23, confirming active exploitation, and EPSS assigns an 85.2% probability of exploitation within 30 days (100th percentile); ransomware use is unknown.
    · Ubiquiti UniFi OS Server · Ubiquiti UniFi Cloud Gateway Industrial firmware KEV PoC mass
  • CVE-2026-3491010.087%
    Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
    CVE-2026-34910 is an improper input validation flaw (CWE-20) in Ubiquiti UniFi OS that allows command injection on affected gateways and network video recorders. A malicious actor with network access to the device can send crafted, unvalidated input that triggers arbitrary command execution, with no privileges or user interaction required (CVSS 3.1 base score 10.0, network vector, scope changed). Successful exploitation grants full control of the device — high confidentiality, integrity, and availability impact — and can serve as a foothold into the attached network. Affected products span the UniFi gateway and recording line: UniFi OS Server, Cloud Gateway Industrial, Dream Machine/Pro/Special Edition/Pro Max, Enterprise Fortress Gateway, Dream Wall, Dream Router and Dream Router 7, UniFi Express 7, and the UniFi Network Video Recorder. CISA added the flaw to the Known Exploited Vulnerabilities catalog on 2026-06-23, public reporting describes in-the-wild exploitation being used to build a Mirai botnet, and EPSS estimates an 87.5% chance of exploitation within 30 days.
    · Ubiquiti (ui) UniFi OS · Ubiquiti (ui) UniFi OS Server KEV PoC mass
  • CVE-2026-3490910.065%
    Unauthenticated Path Traversal in Ubiquiti UniFi OS Devices
    A path traversal flaw (CWE-22) in Ubiquiti UniFi OS, carrying a maximum CVSS 3.1 score of 10.0, allows a malicious actor with network access to send crafted requests that traverse directories and read arbitrary files on the underlying system. Files retrieved this way can be manipulated to gain access to an underlying account, and the CVSS vector's scope-changed, high-impact ratings indicate the resulting compromise can extend beyond the vulnerable component. Any environment running the affected UniFi OS devices is at risk, spanning UniFi OS Server and the Dream Machine, Dream Router, Dream Wall, Cloud Gateway, Enterprise Fortress Gateway, UniFi Express 7, and UniFi Network Video Recorder firmware families. CISA added the flaw to its Known Exploited Vulnerabilities catalog on 2026-06-23, confirming exploitation in the wild, and EPSS assigns a 63.9% probability of exploitation within 30 days (99th percentile). It was patched by Ubiquiti in June 2026 alongside related UniFi OS issues CVE-2026-34908 and CVE-2026-34910.
    · Ubiquiti UniFi OS Server · Ubiquiti UniFi Cloud Gateway Industrial firmware KEV PoC mass

Appears with

vendor Ubiquiti 3organization CISA 2vendor CISA 2
Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.