Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
10.0
CVE-2026-34910: Unifi OS Command Injection through Malicious Network Access
Known exploited
Exploitation likelihood: 79%
CVE-2026-34910
CVE-2026-34910
Summary
Unifi OS devices can be compromised if an attacker is on the same network. This could allow the attacker to execute unauthorized system commands. To protect your network, ensure you keep UniFi OS software up to date and implement network segmentation.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ubiquiti | unifi os | All versions |
| ui | unifi_os_server |
< 5.0.8 cpe:2.3:a:ui:unifi_os_server:*:*:*:*:*:*:*:* |
| ui | unifi_cloud_gateway_industrial_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_machine_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_machine_pro_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_machine_special_edition_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_machine_pro_max_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:* |
| ui | enterprise_fortress_gateway_firmware |
< 5.1.12 cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_wall_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_wall_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_router_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_router_7_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_express_7_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_express_7_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_network_video_recorder_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_network_video_recorder_pro_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_network_video_recorder_instant_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:* |
| ui | enterprise_network_video_recorder_firmware |
< 5.1.12 cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloud_gateway_ultra_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloud_gateway_max_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloud_gateway_fiber_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_router_5g_max_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:* |
| ui | enterprise_network_video_recorder_core_firmware |
< 5.1.12 cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloud_key_plus_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloudkey_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloudkey_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_cloudkey_enterprise_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_network_video_recorder_g2_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_network_video_recorder_g2_pro_firmware |
< 5.1.12 cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:* |
| ui | unifi_dream_machine_beast_firmware |
< 5.1.11 cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:* |
| ui | unas_2_firmware |
< 5.1.10 cpe:2.3:o:ui:unas_2_firmware:*:*:*:*:*:*:*:* |
| ui | unas_4_firmware |
< 5.1.10 cpe:2.3:o:ui:unas_4_firmware:*:*:*:*:*:*:*:* |
| ui | unas_pro_firmware |
< 5.1.10 cpe:2.3:o:ui:unas_pro_firmware:*:*:*:*:*:*:*:* |
| ui | unas_pro_4_firmware |
< 5.1.10 cpe:2.3:o:ui:unas_pro_4_firmware:*:*:*:*:*:*:*:* |
| ui | unas_pro_8_firmware |
< 5.1.10 cpe:2.3:o:ui:unas_pro_8_firmware:*:*:*:*:*:*:*:* |
Original title
Ubiquiti UniFi OS Improper Input Validation Vulnerability
Original description
Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.
nvd CVSS3.1
10.0
Vulnerability type
CWE-20
Improper Input Validation
Published: 23 Jun 2026 · Updated: 26 Jun 2026 · First seen: 22 May 2026