PT-2026-42659 · Ubiquiti · Unifi Os
Published
2026-05-22
·
Updated
2026-06-09
·
CVE-2026-34910
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
UniFi OS (affected versions not specified)
Description
A malicious actor with network access can exploit improper input validation to perform command injection. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the target device.
Recommendations
Apply available patches for UniFi OS.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Unifi Os