CVE-2026-34910

Zwakheid

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Getroffen producten

• ui unifi_os_server
• ui unifi_cloud_gateway_industrial_firmware
• ui unifi_cloud_gateway_industrial
• ui unifi_dream_machine_firmware
• ui unifi_dream_machine
• ui unifi_dream_machine_pro_firmware
• ui unifi_dream_machine_pro
• ui unifi_dream_machine_special_edition_firmware

Bronnen

• https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34910
• https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/