High severity8.8NVD Advisory· Published Jan 8, 2026· Updated Jul 30, 2026

CVE-2026-21639

Description

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.

Affected products

Ubiquiti Inc/airMAX Wireless Protocolllm-create
Ubiquiti Inc/Airmax Mv5
Range: 0
Ubiquiti Inc/Airfiber Af60v5
Range: 0
UI/Airmax Ac Firmware
cpe:2.3:o:ui:airmax_ac_firmware:*:*:*:*:*:*:*:*
Range: <8.7.21
UI/Airmax M Firmware
cpe:2.3:o:ui:airmax_m_firmware:*:*:*:*:*:*:*:*
Range: <6.3.24
UI/Airfiber Af60 Xg Firmware
cpe:2.3:o:ui:airfiber_af60-xg_firmware:*:*:*:*:*:*:*:*
Range: <1.2.3
UI/Airfiber Af60 Firmware
cpe:2.3:o:ui:airfiber_af60_firmware:*:*:*:*:*:*:*:*
Range: <2.6.8

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-Advisory-Bulletin-061-061/1e4fe5f8-29c7-4a7d-a518-01b1537983banvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000