CVE-2026-34909 KEV
10.0
CRITICAL · CVSS 3.1 · EPSS 1.8% (pctl 78)
Patch first
On CISA KEV — known exploited in the wild, due 2026-06-26.
Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Scoring
| CVSS | 10.0 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 1.79% — more likely to be exploited than 78% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | yes — remediate by 2026-06-26 |
| Public exploit | none known |
| Published | 2026-05-22 |
| Last modified | 2026-07-23 |
CISA KEV
| Name | Ubiquiti UniFi OS Path Traversal Vulnerability |
|---|---|
| Added | 2026-06-23 |
| Due | 2026-06-26 |
| Vendor / product | Ubiquiti / UniFi OS |
| Ransomware use | none reported |
Affected (40)
| Vendor | Product |
|---|---|
| ui | enterprise fortress gateway |
| ui | enterprise fortress gateway firmware |
| ui | enterprise network video recorder |
| ui | enterprise network video recorder core |
| ui | enterprise network video recorder core firmware |
| ui | enterprise network video recorder firmware |
| ui | unifi cloud gateway fiber |
| ui | unifi cloud gateway fiber firmware |
| ui | unifi cloud gateway industrial |
| ui | unifi cloud gateway industrial firmware |
| ui | unifi cloud gateway max |
| ui | unifi cloud gateway max firmware |
| ui | unifi cloud gateway ultra |
| ui | unifi cloud gateway ultra firmware |
| ui | unifi cloud key plus firmware |
| ui | unifi dream machine |
| ui | unifi dream machine firmware |
| ui | unifi dream machine pro |
| ui | unifi dream machine pro firmware |
| ui | unifi dream machine pro max |
| ui | unifi dream machine pro max firmware |
| ui | unifi dream machine special edition |
| ui | unifi dream machine special edition firmware |
| ui | unifi dream router |
| ui | unifi dream router 5g max |
| ui | unifi dream router 5g max firmware |
| ui | unifi dream router 7 |
| ui | unifi dream router 7 firmware |
| ui | unifi dream router firmware |
| ui | unifi dream wall |
| ui | unifi dream wall firmware |
| ui | unifi express 7 |
| ui | unifi express 7 firmware |
| ui | unifi network video recorder |
| ui | unifi network video recorder firmware |
| ui | unifi network video recorder instant |
| ui | unifi network video recorder instant firmware |
| ui | unifi network video recorder pro |
| ui | unifi network video recorder pro firmware |
| ui | unifi os server |
References
→ the Explorer · watch your stack · NVD