Skip to main content
IMMUNITYSEC

CVE-2026-34908

10.0
CRITICAL
CVSS 3.1
EPSS 15.2% · 97th pctCISA KEV · Exploited in the wildCWE-284
2026-05-22Updated 2026-06-24KEV 2026-06-23
CISA Known Exploited Vulnerabilities

Ubiquiti UniFi OS Improper Access Control Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.

Added to KEV
2026-06-23
Remediation due
2026-06-26

Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

CISA notes
https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

Severity

CVSS 3.1 · CNA10 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC · CISA-ADP
Exploitationactive
Automatableyes
Technical impacttotal

Exploitation Context

as of October 15, 2026
All KEV statistics→
  • CISA added CVE-2026-34908 to the KEV catalog 32 days after its CVE record was published. The median for entries added in 2026 so far is 14 days.
  • It is one of 4 Ubiquiti entries in the CISA KEV catalog, and one of 3 added in 2026.
  • Its current EPSS score (15.2%) is higher than that of 31% of CISA KEV entries.

Affected Products

ProductAffected versions
Ubiquiti Inc
UniFi OS Server
0 to <5.0.8
Ubiquiti Inc
UDM
0 to <5.1.12
Ubiquiti Inc
UDM-Pro
0 to <5.1.12
Ubiquiti Inc
UDM-SE
0 to <5.1.12
Ubiquiti Inc
UDM-Pro-Max
0 to <5.1.12
Ubiquiti Inc
UDM-Beast
0 to <5.1.11
Ubiquiti Inc
EFG
0 to <5.1.12
Ubiquiti Inc
UDW
0 to <5.1.12
Ubiquiti Inc
UDR
0 to <5.1.12
Ubiquiti Inc
UDR7
0 to <5.1.12
Ubiquiti Inc
UDR-5G
0 to <5.1.12
Ubiquiti Inc
Express 7
0 to <5.1.12
Ubiquiti Inc
UNVR
0 to <5.1.12
Ubiquiti Inc
UNVR-Pro
0 to <5.1.12
Ubiquiti Inc
UNVR-Instant
0 to <5.1.12
Ubiquiti Inc
UNVR-G2
0 to <5.1.12
Ubiquiti Inc
UNVR-G2-Pro
0 to <5.1.12
Ubiquiti Inc
ENVR
0 to <5.1.12
Ubiquiti Inc
ENVR-Core
0 to <5.1.12
Ubiquiti Inc
UNAS-2
0 to <5.1.10
Ubiquiti Inc
UNAS-4
0 to <5.1.10
Ubiquiti Inc
UNAS-Pro
0 to <5.1.10
Ubiquiti Inc
UNAS-Pro-4
0 to <5.1.10
Ubiquiti Inc
UNAS-Pro-8
0 to <5.1.10
Ubiquiti Inc
UCKP
0 to <5.1.12
Ubiquiti Inc
UCK
0 to <5.1.12
Ubiquiti Inc
UCK-Enterprise
0 to <5.1.12
Ubiquiti Inc
UCG-Ultra
0 to <5.1.12
Ubiquiti Inc
UCG-Max
0 to <5.1.12
Ubiquiti Inc
UCG-Fiber
0 to <5.1.12
Ubiquiti Inc
UCG-Industrial
0 to <5.1.12

References

1 Links

Record Details

Published
2026-05-22
Last updated
2026-06-24
Assigner (CNA)
hackerone
Credited to
-

More from Ubiquiti Inc

CVE-2026-3491010 CRITICAL

Ubiquiti UniFi OS Improper Input Validation Vulnerability

Ubiquiti IncKEVEPSS 45.8%2026-05-22
CVE-2026-3490910 CRITICAL

Ubiquiti UniFi OS Path Traversal Vulnerability

Ubiquiti IncKEVEPSS 1.8%2026-05-22
CVE-2026-2255710 CRITICAL
Ubiquiti IncEPSS 28.1%2026-03-19

Related

Tool categories

IAM ToolsApplication Security Tools

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.