Brand
Ubiquiti: actively exploited vulnerabilities
4 vulnerabilities in Ubiquiti products (UniFi OS / UniFi Network, airOS (airMAX)) are in CISA’s catalog of exploited vulnerabilities. Last added: June 23, 2026.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
3 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Ubiquiti category to your radar, or open its page.
- Switches, routers and SD-WAN 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Ubiquiti product (UniFi OS / UniFi Network, airOS (airMAX)…) rather than the whole brand.
- UniFi OS / UniFi Network3 vulnerabilities, Switches and routers
- airOS (airMAX)1 vulnerability, Switches and routers
Name used by CISA: Ubiquiti. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Ubiquiti list.
- Rank 1
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34908
Ubiquiti UniFi OS Improper Access Control Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
- Rank 2
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34909
Ubiquiti UniFi OS Path Traversal Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
- Rank 3
Ubiquiti UniFi OS / UniFi NetworkCVE-2026-34910
Ubiquiti UniFi OS Improper Input Validation Vulnerability
CVSS severity 10.0critical
Added Jun 23, 2026
- Rank 4
Ubiquiti airOS (airMAX)CVE-2010-5330
Ubiquiti AirOS Command Injection Vulnerability
CVE from 2010, added in 2022
CVSS severity 9.8critical
Added Apr 15, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.