UniFi OS

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 1, 2026
Last mentionedSep 22, 2026

Timeline

5 articles · newest first

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-linked actor exploited WordPress and Zyxel flaws, stealing government records from dozens of organizations.

BleepingComputerSep 22, 20:35 UTC · Sep 22, 2026Threat actorExploitedCVE-2026-63030 CVE-2026-60137 CVE-2026-7273+95 · 2 reads

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.

GreyNoiseSep 21, 00:00 UTC · Sep 21, 2026Threat actorExploitedCVE-2026-7273 CVE-2026-34908 CVE-2026-34909+93 · 1 read

CVE-2026-34908: UniFi OS Auth Bypass Vulnerability

Ubiquiti disclosed CVE-2026-34908, a CVSS 10.0 authentication bypass in UniFi OS letting network-adjacent attackers alter device configuration without credentials.

Web discovery (articles for new exploits & KEV entries)Sep 8, 21:57 UTC · Sep 8, 2026VulnerabilityCVE-2026-349083

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

Web discovery (articles for new exploits & KEV entries)Sep 8, 06:48 UTC · Sep 8, 2026Exploit / PoCExploitedCVE-2026-349081 · 1 read

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910: Ubiquiti UniFi OS ...

Ubiquiti UniFi OS flaws CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV, chaining auth bypass into command injection.

Web discovery (articles for new exploits & KEV entries)Sep 1, 18:23 UTC · Sep 1, 2026Exploit / PoCExploitedCVE-2026-34908 CVE-2026-34909 CVE-2026-349101 · 1 read

Related CVEs

by mentions

CVE-2026-3490888%10.0
Improper Access Control in Ubiquiti UniFi OS Devices (CVE-2026-34908)
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-3491090%10.0
Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti (ui) UniFi OSKEVPoC
CVE-2026-3490968%10.0
Unauthenticated Path Traversal in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-6303011%9.8
WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
published Jul 17, 2026WordPress CoreKEVPoC ×7
CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×4
CVE-2022-084793%7.8
Local Privilege Escalation ('Dirty Pipe') in the Linux Kernel
published Mar 10, 2022Linux KernelKEVPoC ×4
CVE-2026-601375%5.9
WordPress Core SQL Injection via WP_Query author__not_in (CVE-2026-60137)
published Jul 17, 2026WordPress CoreKEV
CVE-2026-54569<1%9.8
SENAITE.CORE: The SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing…
published Aug 26, 2026
CVE-2023-543912%9.3
Authentication bypass in Proxmox VE login API (libpve-access-control)
published Sep 1, 2026Proxmox Virtual Environment (VE)
CVE-2026-797565%8.7
Unauthenticated OS Command Injection in Nuclio Dashboard (Local/Docker Platform)
published Sep 2, 2026Nuclio (open-source project) Nuclio Dashboard (local/Docker platform)

Appears with

Ubiquitivendor · 5
CISAorganization · 3
Red Heronthreat actor · 2
Zyxelvendor · 2
SENAITE LIMSproduct · 2
Zyxel GS1900product · 2
FlowiseAIproduct · 2
Nuclioproduct · 2
CISAvendor · 2
WordPressproduct · 2
Proxmox VEproduct · 2
Giteaproduct · 2
PAN-OS GlobalProtectproduct · 2
GreyNoiseorganization · 2
Giteavendor · 1
Proxmoxvendor · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.