CVEvulnerability

CVE-2026-34908

10.0 CRITICAL Known exploited Published 2026-05-22 Modified 2026-07-23 Official page ↗

CISA Known Exploited Vulnerability

Ubiquiti UniFi OS Improper Access Control Vulnerability — Ubiquiti UniFi OS

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.

Added to KEV: 2026-06-23
Remediation due: 2026-06-26
Ransomware use: Unknown
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Notes: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908

Status: Analyzed
Published: 2026-05-22
Last modified: 2026-07-23
Assigner: [email protected]
CVSS 3.1 ([email protected]): 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses: CWE-284

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

Affected configurations

• ui unifi os server (< 5.0.8) • ui unifi cloud gateway industrial firmware (< 5.1.12) • ui unifi dream machine firmware (< 5.1.12) • ui unifi dream machine pro firmware (< 5.1.12) • ui unifi dream machine special edition firmware (< 5.1.12) • ui unifi dream machine pro max firmware (< 5.1.12) • ui enterprise fortress gateway firmware (< 5.1.12) • ui unifi dream wall firmware (< 5.1.12) • ui unifi dream router firmware (< 5.1.12) • ui unifi dream router 7 firmware (< 5.1.12) • ui unifi express 7 firmware (< 5.1.12) • ui unifi network video recorder firmware (< 5.1.12) • ui unifi network video recorder pro firmware (< 5.1.12) • ui unifi network video recorder instant firmware (< 5.1.12) • ui enterprise network video recorder firmware (< 5.1.12) • ui unifi cloud gateway ultra firmware (< 5.1.12) • ui unifi cloud gateway max firmware (< 5.1.12) • ui unifi cloud gateway fiber firmware (< 5.1.12) • ui unifi dream router 5g max firmware (< 5.1.12) • ui enterprise network video recorder core firmware (< 5.1.12) • ui unifi cloud key plus firmware (< 5.1.12) • ui unifi cloudkey firmware (< 5.1.12) • ui unifi cloudkey enterprise firmware (< 5.1.12) • ui unifi network video recorder g2 firmware (< 5.1.12) • ui unifi network video recorder g2 pro firmware (< 5.1.12) • ui unifi dream machine beast firmware (< 5.1.11) • ui unas 2 firmware (< 5.1.10) • ui unas 4 firmware (< 5.1.10) • ui unas pro firmware (< 5.1.10) • ui unas pro 4 firmware (< 5.1.10) • ui unas pro 8 firmware (< 5.1.10)

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References