VulnerabilityBleeping Computer
10.0 — CRITICAL
Ubiquiti patches three max severity UniFi OS vulnerabilities
Ubiquiti has released security updates to patch three maximum severity vulnerabilities in Unify OS that can be exploited by remote attackers without privileges. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Ubiquiti has released security updates to patch three maximum severity vulnerabilities in Unify OS, which can be exploited by remote attackers without privileges. The vulnerabilities were reported through the HackerOne bug bounty program and are believed to have been exploited in low-complexity attacks.
⚙️Technical Details
CVEs
CVE-2026-34908CVE-2026-34909CVE-2026-34910CVE-2026-33000CVE-2026-34911Affected Systems: UniFi OS devices
Affected Systems
UniFi OS devices
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Organizations with UniFi OS devices, including those in the United States and potentially other countries.
🛡️Recommended Actions
1Implement security updates as soon as possible
2Monitor network traffic for suspicious activity
3Conduct regular vulnerability scans to identify potential weaknesses
📦Affected Products
UniFi OS devices
🔐NVD Verified DataVERIFIED
CVE-2026-34908 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-284
CVE-2026-34909 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-22
CVE-2026-34910 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-20
CVE-2026-33000 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-20
CVE-2026-34911 ↗CVSS 7.7 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NWeaknesses
CWE-22
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.