Search: “UniFi Access”

108 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 506 Industry 460 Policy & legal 297 Ransomware 291 Data breach 188 Malware 142 AI tools & infra 109 Exploit / PoC 109 Phishing & fraud 87 Threat actor 74 AI safety & security 57 Tools 52 AI industry 27 Model release 19

SeverityAll critical 1108 high 368 medium 320 low 428 info 253

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

CISA added CVE-2026-34908 to the Known Exploited Vulnerabilities catalog on June 23, 2026, with remediation due June 26 under BOD 26-04 guidance. The CVSS 10.0 improper access control flaw (CWE-284) in Ubiquiti UniFi OS allows unauthorized system changes without authentication. Multiple news reports referenced by the page describe the max-severity UniFi flaws being exploited in attacks, and an official patch is available.

Web discovery (articles for new exploits & KEV entries)Sep 8, 06:48 UTC · 8d agoExploit / PoC in the wildCVE-2026-34908

FireEye acquires X15 software to boost big data capabilities

CyberScoopJan 13, 02:07 UTC · Jan 13, 2018Exploit / PoC in the wild

U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 24, 10:00 UTC · Jun 24, 2026Exploit / PoC in the wildCVE-2025-67038 CVE-2026-34908 CVE-2026-34909+1 CVEs

SonicWall SMA appliances exploited in zero-day attacks (CVE-2025-23006)

Help Net SecurityJan 29, 13:19 UTC · Jan 29, 2025Exploit / PoC in the wildCVE-2025-23006

Cisco Unified CM Flaw CVE-2026

Security AffairsJun 28, 15:15 UTC · Jun 28, 2026Exploit / PoC in the wildCVE-2026-20230

Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models

The Hacker NewsAug 10, 08:12 UTC · Aug 10, 2025Exploit / PoC in the wildCVE-2025-25050 CVE-2025-25215 CVE-2025-24922+2 CVEs

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819)

Help Net SecurityMay 8, 00:00 UTC · May 8, 2025Exploit / PoC in the wildCVE-2025-32819 CVE-2025-32820 CVE-2025-32821

Identity discovery: The overlooked lever in strategic risk reduction

Help Net SecurityApr 29, 00:00 UTC · Apr 29, 2026Exploit / PoC

Ubiquiti defect poses account takeover risk for UniFi Networking Application users

CyberScoopMar 20, 16:22 UTC · Mar 20, 2026Exploit / PoC in the wildCVE-2026-22557 CVE-2026-22558

New Rowhammer attacks give complete control of machines running Nvidia GPUs

Ars Technica · SecurityApr 2, 17:00 UTC · Apr 2, 2026Exploit / PoC

How to Streamline Zero Trust Using the Shared Signals Framework

The Hacker NewsDec 9, 11:30 UTC · Dec 9, 2025Exploit / PoC

It's a Zero-day? It's Malware? No! It's Username and Password

The Hacker NewsSep 1, 09:46 UTC · Sep 1, 2023Exploit / PoC

Hackers Exploit Critical Flaw in Triofox File Sharing Product

Infosecurity MagazineNov 11, 12:30 UTC · Nov 11, 2025Exploit / PoC in the wildCVE-2025-12480 CVE-2025-11371

Cisco addresses critical issues in IP Phones and UCS Director

Security AffairsApr 17, 17:26 UTC · Apr 17, 2020Exploit / PoC CVE-2020-3161 CVE-2020-3239 CVE-2020-3240+1 CVEs

Guardian Agents: The Next Layer of Identity Governance

The Hacker NewsJun 26, 11:30 UTC · Jun 26, 2026Exploit / PoC1

SonicWall hit by attackers leveraging zero-day vulnerabilities in its own products?

Help Net SecurityJan 25, 00:00 UTC · Jan 25, 2021Exploit / PoC

1Kosmos BlockID available in AWS Marketplace

Help Net SecurityJun 1, 00:00 UTC · Jun 1, 2023Exploit / PoC

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

Help Net SecurityJun 23, 00:00 UTC · Jun 23, 2023Exploit / PoC CVE-2023-20178

Cisco fixed actively exploited Unified Communications zero day

Security AffairsJan 21, 23:47 UTC · Jan 21, 2026Exploit / PoC in the wildCVE-2026-20045 CVE-2026-20029

Gurucul’s AI-IRM accelerates insider risk detection

Help Net SecuritySep 18, 00:00 UTC · Sep 18, 2025Exploit / PoC in the wildCVE-2026-87491

Fortinet announces FortiGate 4800F to improve security for hyperscale data centers and 5G networks

Help Net SecurityDec 12, 12:03 UTC · Dec 12, 2023Exploit / PoC

U.S. CISA adds a flaw in Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog

Security AffairsJan 24, 09:52 UTC · Jan 24, 2026Exploit / PoC in the wildCVE-2026-20045

Wazuh Offers XDR Functionality at a Price Enterprises Will Love — Free!

The Hacker NewsMar 22, 15:06 UTC · Mar 22, 2022Exploit / PoC

Protect privacy and provide secure mobile access to corporate data

Help Net SecurityJan 16, 11:31 UTC · Jan 16, 2023Exploit / PoC

Attackers exploit another zero-day in ManageEngine software (CVE-2021-44515)

Help Net SecurityDec 21, 09:45 UTC · Dec 21, 2021Exploit / PoC CVE-2021-44515 CVE-2021-44077

Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

The Hacker NewsDec 21, 09:00 UTC · Dec 21, 2024Exploit / PoC CVE-2024-41713 CVE-2024-35286 CVE-2024-55550+3 CVEs

Juniper Secure AI-Native Edge accelerates detection of potential network threats

Help Net SecurityOct 8, 00:00 UTC · Oct 8, 2024Exploit / PoC

VersaAI delivers AI-assisted enhancements across the Versa Networks portfolio

Help Net SecurityAug 21, 00:00 UTC · Aug 21, 2023Exploit / PoC

U.S., UK, Australia to ask Facebook to delay message encryption

CyberScoopOct 4, 18:55 UTC · Oct 4, 2019Exploit / PoC in the wild

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910: Ubiquiti UniFi OS ...

Ubiquiti UniFi OS flaws CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV, chaining auth bypass into command injection.

Ubiquiti UniFi OS vulnerabilities CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 were added to CISA's KEV catalog. CVE-2026-34908 (CVSS 10.0, CWE-284) is an unauthenticated improper access control flaw allowing unauthorized system changes, described as the initial entry point. It enables attackers to then leverage chained path traversal and command injection flaws for deeper compromise.

Web discovery (articles for new exploits & KEV entries)Sep 1, 18:23 UTC · 15d agoExploit / PoC in the wildCVE-2026-34908 CVE-2026-34909 CVE-2026-34910