CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...

CVE-2026-116839

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices. A malicious actor can exploit this by luring an authenticated user to a malicious page, enabling the attacker to make unauthorized changes and execute a Denial of Service (DoS) attack on the device. No specific exploita...

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

EUVD-2026-110579

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service DoS attack on the device...

CVE-2026-116838

A Cross-Site Request Forgery (CSRF) vulnerability exists in airMAX M devices . A malicious actor can lure an authenticated user to a malicious page to trigger the CSRF, which can then be used to execute Command Injection on the device. No specific remediation or exploit details are provided in th...

CVE-2026-116838

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

EUVD-2026-110578

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery CSRF vulnerability found in airMAX M devices to execute a Command Injection on the device...

CVE-2026-116837

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116837

The airMAX M, LTU, SolarPoint, and SolarSwitch devices are vulnerable to a Heap-based Buffer Overflow (CWE-122). A malicious actor with access to the adjacent network can exploit this flaw to achieve arbitrary code execution on the affected hardware. No specific exploit details or remediation ste...

EUVD-2026-110576

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device...

CVE-2026-116836

A Stored Cross-Site Scripting (XSS) vulnerability exists in airMAX M devices . A malicious actor with access to the adjacent network could exploit this flaw under specific conditions to escalate privileges on the device. While the vulnerability's impact is significant, the documents do not provid...

CVE-2026-116836

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...

EUVD-2026-110568

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting XSS vulnerability found in airMAX M devices to escalate privileges on the device...

pyrmax

pyrmax Decoder and encoder for Ubiquiti AirMAX wire-protocol frames, covering both the AC WA firmware and M XW/XM firmware series. Decode of the cleartext outer headers is driven by Kaitai Struct schemas under ksy/. The AC payload version-gated, switched on msgtype, with the deauth XOR-unmask is...

pyrmax

pyrmax Decoder und Encoder für Ubiquiti-AirMAX-Wire-Protokoll-Frames, die sowohl die AC-Serie WA-Firmware als auch die M-Serie XW/XM-Firmware abdecken. Dekodierung der Klartext-äußeren Header erfolgt über Kaitai Struct-Schemata unter ksy/. Die AC-Nutzlast versionsabhängig, umgeschaltet über...

CVE-2026-21639

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution RCE within the affected product. Affected Products: airMAX AC Version 8.7.20 and earlier airMAX M Version 6.3.22 and earlier airFiber AF60-XG...

CVE-2026-21638

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution RCE within the affected product. Affected Products: UBB-XG Version 1.2.2 and earlier UDB-Pro/UDB-Pro-Sector Version 1.4.1 and earlier UBB...