CVE-2026-34908

Name of the Vulnerable Software and Affected Versions UniFi OS (affected versions not specified)

Description An improper access control issue in UniFi OS devices allows a malicious actor with network access to make unauthorized changes to the system. This flaw can be chained with other vulnerabilities to achieve unauthenticated remote code execution as root, and it is currently being exploited in the wild to deploy commodity malware.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.