CVE-2026-21638

🗓️ 08 Jan 2026 16:14:22Reported by hackeroneType

A wireless attacker within range can exploit the airMAX protocol to execute remote code on affected products.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-21638	8 Jan 202618:01	–	circl
CNNVD	Ubiquiti多款产品安全漏洞	8 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-21638	8 Jan 202616:14	–	cvelist
EUVD	EUVD-2026-1491	8 Jan 202616:14	–	euvd
NVD	CVE-2026-21638	8 Jan 202617:15	–	nvd
OSV	CVE-2026-21638	8 Jan 202617:15	–	osv
Positive Technologies	PT-2026-2073	8 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-21638	10 Jan 202605:40	–	redhatcve
Vulnrichment	CVE-2026-21638	8 Jan 202616:14	–	vulnrichment

NVD

Vulners

Node

ui ubb-xg_firmwareRange<1.2.3

AND

ui ubb-xgMatch-

Node

ui udb-pro_firmwareRange<1.4.2

AND

ui udb-proMatch-

Node

ui udb-pro-sector_firmwareRange<1.4.2

AND

ui udb-pro-sectorMatch-

Node

ui ubb_firmwareRange<3.1.7

AND

ui ubbMatch-

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "UBB-XG",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.2.3",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "UDB-Pro/UDB-Pro-Sector",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.4.2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "UBB",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "3.1.7",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-060-060/cde18da7-2bc4-41bb-a9cc-48a4a4c479c1

14 Jan 2026 21:06Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.8

EPSS0.00225

SSVC

CWE-77