CVE-2026-21638

CVE-2026-21638 affects Ubiquiti devices vulnerable to remote code execution via the airMAX Wireless Protocol. Affected: UBB-XG (<=1.2.2), UDB-Pro/UDB-Pro-Sector (<=1.4.1), UBB (

CVE-2026-21639

The CVE-2026-21639 vulnerability affects Ubiquiti airMAX line and related devices, enabling remote code execution for attackers within Wi‑Fi range. Affected products and versions: airMAX AC ≤ 8.7.20, airMAX M ≤ 6.3.22, airFiber AF60-XG ≤ 1.2.2, and airFiber AF60 ≤ 2.6.7. Mitigations from multiple...

CVE-2026-21639: Buffer Copy without Checking Size of Input

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution RCE within the affected product...

CVE-2026-21638: Improper Neutralization of Special Elements used in a Command

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution RCE within the affected product. Affected Products: UBB-XG Version 1.2.2 and earlier UDB-Pro/UDB-Pro-Sector Version 1.4.1 and earlier UBB...

PT-2026-2074

Name of the Vulnerable Software and Affected Versions airMAX AC versions 8.7.20 and earlier airMAX M versions 6.3.22 and earlier airFiber AF60-XG version 1.2.2 and earlier airFiber AF60 versions 2.6.7 and earlier Description A malicious actor within Wi-Fi range could exploit a flaw in the airMAX...