Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Ubiquiti: actively exploited vulnerabilities

4 vulnerabilities in Ubiquiti products (UniFi OS / UniFi Network, airOS (airMAX)) are in CISA’s catalog of exploited vulnerabilities. Last added: June 23, 2026.

Ubiquiti security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Ubiquiti category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • UniFi OS / UniFi Network 3 vulnerabilities · Switches and routers
  • airOS (airMAX) 1 vulnerability · Switches and routers

Name used by CISA: Ubiquiti. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Ubiquiti list.

  1. Rank 1Ubiquiti UniFi OS / UniFi Network

    CVE-2026-34908

    Ubiquiti UniFi OS Improper Access Control Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 23, 2026
    CISA deadline
    3 days
    CVSS severity
    10.0 (critical)

  2. Rank 2Ubiquiti UniFi OS / UniFi Network

    CVE-2026-34909

    Ubiquiti UniFi OS Path Traversal Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 23, 2026
    CISA deadline
    3 days
    CVSS severity
    10.0 (critical)

  3. Rank 3Ubiquiti UniFi OS / UniFi Network

    CVE-2026-34910

    Ubiquiti UniFi OS Improper Input Validation Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 23, 2026
    CISA deadline
    3 days
    CVSS severity
    10.0 (critical)

  4. Rank 4Ubiquiti airOS (airMAX)

    CVE-2010-5330

    CVE from 2010, added in 2022

    Ubiquiti AirOS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 15, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.