26 matches found
UniFi OS Server - Command Injection
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...
CVE-2026-34908-check
UniFi OS Server Unauth RCE Chain Detection Script A safe detector for the unauthenticated remote code execution chain in UniFi OS Server ≤ 5.0.6, disclosed in Ubiquiti Security Advisory Bulletin 064: CVE| Class| Role in the chain ---|---|--- CVE-2026-34908 / CVE-2026-34909| Improper access contro...
CVE-2026-34910-PoC
CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...
Ubiquiti UniFi OS Server < 5.1.37 Multiple Vulnerabilities
The version of Ubiquiti UniFi OS Server installed on the remote host is prior to 5.1.37. It is, therefore, affected by multiple vulnerabilities: - A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability fou...
EUVD-2026-66366
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
EUVD-2026-66367
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77540
CVE-2026-77540 is a CRITICAL (CVSS 9.1) vulnerability in UniFi OS Server by Ubiquiti, caused by Improper Input Validation that allows a privileged network attacker to achieve Command Injection on the host device. The attack requires high privileges and no user interaction, with changed scope impa...
CVE-2026-77540
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
CVE-2026-77539
CVE-2026-77539 is a critical (CVSS 9.1) Improper Input Validation vulnerability in Ubiquiti UniFi OS Server . An attacker with network access and high privileges can exploit it to perform Command Injection on the host device, leading to high impact on confidentiality, integrity, and availability ...
CVE-2026-77539
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
PT-2026-82059
Name of the Vulnerable Software and Affected Versions UniFi OS Server affected versions not specified Description An improper input validation issue allows a malicious actor with network access and high privileges to perform command injection on the host device. Command injection is a technique...
CVE-2026-77539: Improper Input Validation
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
PT-2026-82058
Name of the Vulnerable Software and Affected Versions UniFi OS Server affected versions not specified Description An Improper Input Validation issue allows a malicious actor with network access and high privileges to perform Command Injection on the host device. Command Injection is a flaw that...
CVE-2026-77540: Improper Input Validation
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...
