๐Ÿ” CVE Alert

CVE-2026-116837

HIGH 8.8
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

CWE CWE-122
Vendor ubiquiti inc
Product airmax m
Published Oct 27, 2026
Stay Ahead of the Next One

Get instant alerts for ubiquiti inc airmax m

Be the first to know when new high vulnerabilities affecting ubiquiti inc airmax m are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Ubiquiti Inc / airMAX M
0 < 6.3.26
Ubiquiti Inc / LTU PTMP
0 < 2.4.2
Ubiquiti Inc / LTU PTP
0 < 1.5.7
Ubiquiti Inc / SolarPoint / SolarSwitch
0 < 2.0.3

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
uisp.community.ui.com: https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3