Ubiquiti

Search everything

Mentions · 7d0
Mentions · 30d4
All mentions18
First seenAug 24, 2026
Last mentioned14d ago

Timeline

18 articles · newest first

Hackers Exploit D-Link, Ubiquiti and SAP Flaws to Hijack Devices for Proxy Networks

Actor skynox7 exploited D-Link, Ubiquiti, and SAP flaws to proxyjack 143 devices.

Cyber Security NewsOct 16, 09:02 UTC · 14d agoExploit / PoCExploitedCVE-2021-44228 CVE-2024-3272 CVE-2024-3273+14

New Proxyjacking Campaign Exploits Network Device Flaws to Build Stealthy Proxy Infrastructure

GreyNoise says attackers exploited NAS, NVR, and SAP flaws to install Pawns.app on 143 devices.

GBHackersOct 16, 05:54 UTC · 14d agoExploit / PoCExploitedCVE-2021-44228 CVE-2024-3272 CVE-2024-3273+13 · 2 reads

Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth

GreyNoise found attackers exploiting edge-device flaws in 34 countries to install Pawns.app and resell bandwidth.

BleepingComputerOct 15, 18:20 UTC · 15d agoMalwareExploitedCVE-2024-3272 CVE-2024-3273 CVE-2021-44228+14 · 1 read

skynox7: Proxyjacking Edge Devices Into Residential Proxies

An actor exploited edge-device flaws to install Pawns.app, compromising at least 143 devices in 34 countries.

GreyNoiseOct 15, 00:00 UTC · 16d agoExploit / PoCExploitedCVE-2024-3272 CVE-2024-3273 CVE-2021-44228+18 · 5 reads

Ubiquiti security advisory (AV26-954)

Canada's Cyber Centre warns of vulnerabilities in multiple Ubiquiti UniFi gateways, routers, and firewalls and urges updates.

Canadian Centre for Cyber SecuritySep 23, 17:46 UTC · Sep 23, 2026Advisory1 · 1 read

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-linked actor exploited WordPress and Zyxel flaws, stealing government records from dozens of organizations.

BleepingComputerSep 22, 20:35 UTC · Sep 22, 2026Threat actorExploitedCVE-2026-63030 CVE-2026-60137 CVE-2026-7273+95 · 2 reads

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers

Chinese hackers exploited ZyXEL CVE-2026-7273 on GS1900 switches in 48 countries; CISA added it to KEV.

SecurityWeekSep 22, 11:55 UTC · Sep 22, 2026Exploit / PoCExploitedCVE-2026-72732 · 1 read

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.

GreyNoiseSep 21, 00:00 UTC · Sep 21, 2026Threat actorExploitedCVE-2026-7273 CVE-2026-34908 CVE-2026-34909+93 · 1 read

Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

AI-orchestrated campaign exploited PaperCut NG/MF RCE (CVE-2026-81578/82078), compromising 440+ instances at 395 organizations in 48 countries.

GreyNoiseSep 9, 00:00 UTC · Sep 9, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+14 · 1 read

CVE-2026-34908: UniFi OS Auth Bypass Vulnerability

Ubiquiti disclosed CVE-2026-34908, a CVSS 10.0 authentication bypass in UniFi OS letting network-adjacent attackers alter device configuration without credentials.

Web discovery (articles for new exploits & KEV entries)Sep 8, 21:57 UTC · Sep 8, 2026VulnerabilityCVE-2026-349083

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

Web discovery (articles for new exploits & KEV entries)Sep 8, 06:48 UTC · Sep 8, 2026Exploit / PoCExploitedCVE-2026-349081 · 1 read

404 Media

404 Media homepage roundup: WordPress CEO Matt Mullenweg put on leave, first Take It Down Act sentence of 15 years, and DHS predictive policing revelations.

404 MediaSep 8, 00:00 UTC · Sep 8, 2026Other5

Weekly Update 520: The Unscripted Edition

Troy Hunt's Weekly Update 520 covers YouTube's automatic thumbnail generation and installing a Lockwood ES2100 electric strike with Ubiquiti Access door locking.

Troy HuntSep 6, 23:31 UTC · Sep 6, 2026Other1 · 1 read

Weekly Update 519: Breaches & Data Integrity

Troy Hunt's weekly update mentions new breach data dumps, IoT door lock research, and conference preparations.

Troy HuntSep 1, 22:26 UTC · Sep 1, 2026Industry2

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910: Ubiquiti UniFi OS ...

Ubiquiti UniFi OS flaws CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV, chaining auth bypass into command injection.

Web discovery (articles for new exploits & KEV entries)Sep 1, 18:23 UTC · Sep 1, 2026Exploit / PoCExploitedCVE-2026-34908 CVE-2026-34909 CVE-2026-349101 · 1 read

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

Ubiquiti patches 22 UniFi vulnerabilities, 21 rated critical including three CVSS 10.0 flaws enabling unauthorized access.

CyberScoopAug 26, 18:47 UTC · Aug 26, 2026VulnerabilityCVE-2026-77537 CVE-2026-77550 CVE-2026-775542

Ubiquiti security advisory (AV26-850)

Canada's Cyber Centre reports critical vulnerabilities across Ubiquiti UniFi products including UniFi OS Server, Network, Protect, and Access; updates required.

Canadian Centre for Cyber SecurityAug 26, 17:11 UTC · Aug 26, 2026Advisory2 · 2 reads

Weekly Update 518: IoT Doorlock Nirvana with UniFi

Troy Hunt describes building a home IoT door-lock setup around Ubiquiti UniFi hardware, relying on main power rather than batteries.

Troy HuntAug 24, 04:19 UTC · Aug 24, 2026Other1

Related CVEs

by mentions

CVE-2026-3490888%10.0
Improper Access Control in Ubiquiti UniFi OS Devices (CVE-2026-34908)
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2021-44228100%10.0
JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
published Dec 10, 2021Apache Log4j2KEVRansomwarePoC ×9
CVE-2025-3132499%9.8
Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer
published Apr 24, 2025sap netweaverKEVRansomwarePoC
CVE-2024-3273100%9.8
Command Injection in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L NAS Devices
published Apr 4, 2024D-Link DNS-320L NASKEVPoC
CVE-2024-327298%9.8
Hard-Coded Backdoor Credentials in End-of-Life D-Link NAS Devices
published Apr 4, 2024D-Link DNS-320LKEVPoC
CVE-2026-3490968%10.0
Unauthenticated Path Traversal in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-3491090%10.0
Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti (ui) UniFi OSKEVPoC
CVE-2026-72733%8.8
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
published Jun 16, 2026Zyxel GS1900 Series SwitchesKEVPoC
CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×4
CVE-2026-56271<1%9.3
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and…
published Jul 12, 2026flowiseai flowise

Appears with

GreyNoiseorganization · 8
UniFi OSproduct · 5
CISAorganization · 5
WordPressproduct · 4
Pawns.appproduct · 4
D-Linkvendor · 4
SAPvendor · 4
D-Link ShareCenterproduct · 4
SAP NetWeaver Visual Composerproduct · 4
Red Heronthreat actor · 3
Giteaproduct · 3
Ubiquiti UniFi Videoproduct · 3
Hikvisionvendor · 3
Dahuavendor · 3
Zyxelvendor · 3
Proxmoxvendor · 2

Entities are extracted by the model from each article. First seen Aug 24, 2026, last mentioned 14d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.