24 matches found
UniFi OS Server - Command Injection
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...
CVE-2026-34908-check
Script de Detección de Cadena RCE sin Autenticación en UniFi OS Server Un detector seguro para la cadena de ejecución remota de código sin autenticación en UniFi OS Server ≤ 5.0.6, divulgado en el Boletín de Aviso de Seguridad 064 de Ubiquiti: CVE| Clase| Rol en la cadena ---|---|--- CVE-2026-349...
CVE-2026-34910-PoC
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...
Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities
The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...
EUVD-2026-66366
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
EUVD-2026-66367
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
CVE-2026-77540 is a CRITICAL (CVSS 9.1) vulnerability in UniFi OS Server by Ubiquiti, caused by Improper Input Validation that allows a privileged network attacker to achieve Command Injection on the host device. The attack requires high privileges and no user interaction, with changed scope impa...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
CVE-2026-77539 is a critical (CVSS 9.1) Improper Input Validation vulnerability in Ubiquiti UniFi OS Server . An attacker with network access and high privileges can exploit it to perform Command Injection on the host device, leading to high impact on confidentiality, integrity, and availability ...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
PT-2026-82059
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
PT-2026-82058
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
UniFi OS CVE Proof of Concept Proof of concept untuk pengujia...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE...
UniFi OS Server Unauthenticated Remote Code Execution Chain Detection Script
This tool is a safe detector for the unauthenticated remote code execution chain in UniFi OS Server versions 5.0.6 and below, as disclosed in Ubiquiti Security Advisory Bulletin 064...