Critical severity10.0CISA KEVNVD Advisory· Published May 22, 2026· Updated Jul 23, 2026
CVE-2026-34909
CVE-2026-34909
Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Affected products
33- cpe:2.3:o:ui:unifi_cloud_gateway_industrial_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_special_edition_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_pro_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:enterprise_fortress_gateway_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_7_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_instant_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:enterprise_network_video_recorder_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_ultra_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_gateway_fiber_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_router_5g_max_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:enterprise_network_video_recorder_core_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloud_key_plus_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_cloudkey_enterprise_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_network_video_recorder_g2_pro_firmware:*:*:*:*:*:*:*:*Range: <5.1.12
- cpe:2.3:o:ui:unifi_dream_machine_beast_firmware:*:*:*:*:*:*:*:*Range: <5.1.11
Patches
Vulnerability mechanics
References
3- community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963bnvdPatchVendor Advisory
- www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/nvdExploitThird Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
15- ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS HijacksThe Hacker News · Aug 3, 2026
- Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OSThe Hacker News · Jul 8, 2026
- 29th June – Threat Intelligence ReportCheck Point Research · Jun 29, 2026
- Breach Roundup: How Hackers Exploited a Cisco SD-WAN FlawGovInfoSecurity · Jun 26, 2026
- CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively ExploitedThe Hacker News · Jun 24, 2026
- CISA warns of max severity Ubiquiti flaws exploited in attacksBleepingComputer · Jun 24, 2026
- Critical Ubiquiti Vulnerabilities in Attackers’ CrosshairsSecurityWeek · Jun 24, 2026
- CISA Warns of Ubiquiti UniFi OS Vulnerability Actively Exploited in AttacksCyber Security News · Jun 24, 2026
- Ubiquiti: 2 Actively-Exploited Flaws Added to CISA KEVVypr Intelligence · Jun 23, 2026
- ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and MoreThe Hacker News · Jun 15, 2026
- Critical UniFi OS bug lets hackers gain root without authenticationBleepingComputer · Jun 8, 2026
- ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and MoreThe Hacker News · Jun 8, 2026
- ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News · May 25, 2026
- Ubiquiti patches three max severity UniFi OS vulnerabilitiesBleepingComputer · May 22, 2026
- CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts