CVE-2026-34909

🗓️ 22 May 2026 02:16:34Reported by [email protected]Type

A path traversal flaw in UniFi OS devices lets attackers access system files and an underlying account.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for CVE-2026-34908	5 Jun 202620:28	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Ui Unifi_Os_Server	9 Aug 202616:58	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Ui Unifi_Os_Server	22 Aug 202611:22	–	githubexploit
attackerkb	CVE-2026-34909	22 May 202600:43	–	attackerkb
BDU FSTEC	UniFi OS Server Path Traversal	4 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-34909	22 May 202607:30	–	circl
CISA KEV Catalog	Ubiquiti UniFi OS Path Traversal Vulnerability	23 Jun 202600:00	–	cisa_kev
CNNVD	Ubiquiti UniFi OS Server security vulnerabilities	22 May 202600:00	–	cnnvd
CVE	CVE-2026-34909	22 May 202600:43	–	cve
Cvelist	CVE-2026-34909	22 May 202600:43	–	cvelist

NVD

Node

ui unifi_os_serverRange<5.0.8

Node

AND

ui unifi_cloud_gateway_industrial_firmwareRange<5.1.12

ui unifi_cloud_gateway_industrialMatch-

Node

AND

ui unifi_dream_machine_firmwareRange<5.1.12

ui unifi_dream_machineMatch-

Node

AND

ui unifi_dream_machine_pro_firmwareRange<5.1.12

ui unifi_dream_machine_proMatch-

Node

AND

ui unifi_dream_machine_special_edition_firmwareRange<5.1.12

ui unifi_dream_machine_special_editionMatch-

Node

AND

ui unifi_dream_machine_pro_max_firmwareRange<5.1.12

ui unifi_dream_machine_pro_maxMatch-

Node

AND

ui enterprise_fortress_gateway_firmwareRange<5.1.12

ui enterprise_fortress_gatewayMatch-

Node

AND

ui unifi_dream_wall_firmwareRange<5.1.12

ui unifi_dream_wallMatch-

Node

AND

ui unifi_dream_router_firmwareRange<5.1.12

ui unifi_dream_routerMatch-

Node

AND

ui unifi_dream_router_7_firmwareRange<5.1.12

ui unifi_dream_router_7Match-

Node

AND

ui unifi_express_7_firmwareRange<5.1.12

ui unifi_express_7Match-

Node

AND

ui unifi_network_video_recorder_firmwareRange<5.1.12

ui unifi_network_video_recorderMatch-

Node

AND

ui unifi_network_video_recorder_pro_firmwareRange<5.1.12

ui unifi_network_video_recorder_proMatch-

Node

AND

ui unifi_network_video_recorder_instant_firmwareRange<5.1.12

ui unifi_network_video_recorder_instantMatch-

Node

AND

ui enterprise_network_video_recorder_firmwareRange<5.1.12

ui enterprise_network_video_recorderMatch-

Node

AND

ui unifi_cloud_gateway_ultra_firmwareRange<5.1.12

ui unifi_cloud_gateway_ultraMatch-

Node

AND

ui unifi_cloud_gateway_max_firmwareRange<5.1.12

ui unifi_cloud_gateway_maxMatch-

Node

AND

ui unifi_cloud_gateway_fiber_firmwareRange<5.1.12

ui unifi_cloud_gateway_fiberMatch-

Node

AND

ui unifi_dream_router_5g_max_firmwareRange<5.1.12

ui unifi_dream_router_5g_maxMatch-

Node

AND

ui enterprise_network_video_recorder_core_firmwareRange<5.1.12

ui enterprise_network_video_recorder_coreMatch-

Node

AND

ui unifi_cloud_key_plus_firmwareRange<5.1.12

ui unifi_cloud_key_plusMatch-

Node

AND

ui unifi_cloudkey_firmwareRange<5.1.12

ui unifi_cloudkeyMatch-

Node

AND

ui unifi_cloudkey_enterprise_firmwareRange<5.1.12

ui unifi_cloudkey_enterpriseMatch-

Node

AND

ui unifi_network_video_recorder_g2_firmwareRange<5.1.12

ui unifi_network_video_recorder_g2Match-

Node

AND

ui unifi_network_video_recorder_g2_pro_firmwareRange<5.1.12

ui unifi_network_video_recorder_g2_proMatch-

Node

AND

ui unifi_dream_machine_beast_firmwareRange<5.1.11

ui unifi_dream_machine_beastMatch-

Node

AND

ui unas_2_firmwareRange<5.1.10

ui unas_2Match-

Node

AND

ui unas_4_firmwareRange<5.1.10

ui unas_4Match-

Node

AND

ui unas_pro_firmwareRange<5.1.10

ui unas_proMatch-

Node

AND

ui unas_pro_4_firmwareRange<5.1.10

ui unas_pro_4Match-

Node

AND

ui unas_pro_8_firmwareRange<5.1.10

ui unas_pro_8Match-

Node

AND

ui unifi_express_firmwareRange<4.0.14

ui unifi_expressMatch-

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
pwndefend	www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

23 Jul 2026 16:10Current

CVSS 3.110

EPSS0.01793

SSVC

CWE-22