CVE-2026-34910
CVSS Score
10.0
EPSS Score
33.6%
EPSS Percentile
98th
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
| CWE | CWE-20 |
| Vendor | ubiquiti inc |
| Product | unifi os server |
| Published | May 22, 2026 |
| Last Updated | Jun 24, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for ubiquiti inc unifi os server
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-34910.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Ubiquiti Inc / UniFi OS Server
0 < 5.0.8
Ubiquiti Inc / UDM
0 < 5.1.12
Ubiquiti Inc / UDM-Pro
0 < 5.1.12
Ubiquiti Inc / UDM-SE
0 < 5.1.12
Ubiquiti Inc / UDM-Pro-Max
0 < 5.1.12
Ubiquiti Inc / UDM-Beast
0 < 5.1.11
Ubiquiti Inc / EFG
0 < 5.1.12
Ubiquiti Inc / UDW
0 < 5.1.12
Ubiquiti Inc / UDR
0 < 5.1.12
Ubiquiti Inc / UDR7
0 < 5.1.12
Ubiquiti Inc / UDR-5G
0 < 5.1.12
Ubiquiti Inc / Express 7
0 < 5.1.12
Ubiquiti Inc / UNVR
0 < 5.1.12
Ubiquiti Inc / UNVR-Pro
0 < 5.1.12
Ubiquiti Inc / UNVR-Instant
0 < 5.1.12
Ubiquiti Inc / UNVR-G2
0 < 5.1.12
Ubiquiti Inc / UNVR-G2-Pro
0 < 5.1.12
Ubiquiti Inc / ENVR
0 < 5.1.12
Ubiquiti Inc / ENVR-Core
0 < 5.1.12
Ubiquiti Inc / UNAS-2
0 < 5.1.10
Ubiquiti Inc / UNAS-4
0 < 5.1.10
Ubiquiti Inc / UNAS-Pro
0 < 5.1.10
Ubiquiti Inc / UNAS-Pro-4
0 < 5.1.10
Ubiquiti Inc / UNAS-Pro-8
0 < 5.1.10
Ubiquiti Inc / UCKP
0 < 5.1.12
Ubiquiti Inc / UCK
0 < 5.1.12
Ubiquiti Inc / UCK-Enterprise
0 < 5.1.12
Ubiquiti Inc / UCG-Ultra
0 < 5.1.12
Ubiquiti Inc / UCG-Max
0 < 5.1.12
Ubiquiti Inc / UCG-Fiber
0 < 5.1.12
Ubiquiti Inc / UCG-Industrial
0 < 5.1.12
References
community.ui.com: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b pwndefend.com: https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/ cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34910