Ubiquiti has released new security updates for UniFi OS , following the discovery of remote attackers without access rightsthree high - severity vulnerabilities that could allow to compromise critical systems. The vulnerabilities affect the heart of the UniFi ecosystem, which is widely used to manage corporate networks, security systems and IT infrastructure.
UniFi OS at the center of attacks
UniFi OS is the unified operating system that powers the UniFi family of consoles and acts as a central management hub for services such as UniFi Network, UniFi Protect, UniFi Access, UniFi Talk and UniFi Connect. Its widespread use in enterprise environments makes it a particularly attractive target for cybercriminals, as a successful breach can provide access to entire network infrastructures.
CVE-2026-34908: Access control bypass
The first critical vulnerability, coded CVE-2026-34908, is related to an incomplete access control mechanism. Through this weakness, an attacker can make unauthorized changes to the system, affecting the configuration and operation of the UniFi OS. This vulnerability is considered particularly dangerous, as it does not require advanced privileges or complex techniques to exploit.
See also: Google exposed details of unpatched Chromium vulnerability
CVE-2026-34909: Path Traversal and Data Leakage
The second vulnerability, CVE-2026-34909, involves a path traversal, allowing access to files on the underlying system. By exploiting this weakness, an attacker could manipulate requests to gain access to sensitive data or even system accounts. This scenario significantly increases the risk of information leakage and further escalation of the attack.
CVE-2026-34910: Command injection after network compromise
The third highest severity vulnerability, CVE-2026-34910, is related to improper input validation and allows command injection attacks. In this case, the attacker first needs to gain access to the target network, but can then execute arbitrary commands on the system, gaining deeper control of the infrastructure.
Ubiquiti: Additional fixes and critical updates
In addition to the three zero-day vulnerabilities, Ubiquiti also patched another critical command injection flaw (CVE-2026-33000)and a high-severity information disclosure vulnerability (CVE-2026-34911). Both issues directly impact UniFi OS-based devices, reinforcing the need for immediate system upgrades.
See also: Critical vulnerability in Cisco Secure Workload – Update immediately
Uncertainty about possible exploitation in the field
Ubiquiti has not yet confirmed whether the vulnerabilities have been exploited in real-world attacks before they were made public. However, the company notes that their exploitation is characterized by low complexity, which increases the risk to exposed systems. The security vulnerabilities were reported through HackerOne’s bug bounty program, highlighting the importance of collaborating with the security research community.
Extensive attack surface and real risk
According to threat intelligence firm Censys, nearly 100,000 UniFi OS endpoints are exposed online, with about half located in the United States. That number demonstrates the widespread use of Ubiquiti devices and the size of the potential attack surface. However, it's unclear how many of those systems have already been updated with the latest patches.
Attack history and platform targeting
Ubiquiti products are no strangers to cybersecurity, having been repeatedly targeted by both cybercriminals and state-sponsored groups. A notable example is the FBI’s 2024 takedown of the botnet Moobot , which was using compromised Edge OS routers for malicious cyber espionage. Earlier, CISA had listed critical vulnerabilities in Ubiquiti systems as being actively exploited, prompting federal agencies to address them immediately.
See also: CISA: Langflow and Trend Micro vulnerabilities on the KEV list
The importance of promptly updating systems
The recent incident once again highlights the importance of quickly deploying security updates to network infrastructure. In environments where the UniFi OS acts as a central manager of critical services, even a small delay in applying patches can lead to serious data breaches or complete system control by malicious actors.
Source: www.bleepingcomputer.com
