CVE-2026-34909

Zwakheid

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.

Getroffen producten

• ui unifi_os_server
• ui unifi_cloud_gateway_industrial_firmware
• ui unifi_cloud_gateway_industrial
• ui unifi_dream_machine_firmware
• ui unifi_dream_machine
• ui unifi_dream_machine_pro_firmware
• ui unifi_dream_machine_pro
• ui unifi_dream_machine_special_edition_firmware

Bronnen

• https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909
• https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/