CVE-2026-21639

🗓️ 08 Jan 2026 16:14:22Reported by hackeroneType

Remote code execution in airMAX and airFiber devices via the airMAX Wireless Protocol; apply updates.

Reporter	Title	Published	Views	Family All 8
CNNVD	Ubiquiti多款产品安全漏洞	8 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-21639	8 Jan 202616:14	–	cvelist
EUVD	EUVD-2026-1493	8 Jan 202616:14	–	euvd
NVD	CVE-2026-21639	8 Jan 202617:15	–	nvd
OSV	CVE-2026-21639	8 Jan 202617:15	–	osv
Positive Technologies	PT-2026-2074	8 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-21639	10 Jan 202605:41	–	redhatcve
Vulnrichment	CVE-2026-21639	8 Jan 202616:14	–	vulnrichment

NVD

Vulners

Node

ui airmax_ac_firmwareRange<8.7.21

AND

ui airmax_acMatch-

Node

ui airmax_m_firmwareRange<6.3.24

AND

ui airmax_mMatch-

Node

ui airfiber_af60-xg_firmwareRange<1.2.3

AND

ui airfiber_af60-xgMatch-

Node

ui airfiber_af60_firmwareRange<2.6.8

AND

ui airfiber_af60Match-

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "airMAX AC",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "8.7.21",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "airMAX M",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "6.3.24",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "airFiber AF60-XG",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "1.2.3",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc",
    "product": "airFiber AF60",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.6.8",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-061-061/1e4fe5f8-29c7-4a7d-a518-01b1537983ba

14 Jan 2026 21:06Current

7.7High risk

Vulners AI Score7.7

CVSS 3.15.4

EPSS0.00085

SSVC

CWE-77