Vendor

Ubiquiti

4 of 6 Ubiquiti CVEs in Patchfirst (67%) are in of vulnerabilities exploited in the wild.

CVEs: 6
In CISA KEV: 467%
Known ransomware use: 0
Median days to KEV: 32; from publication
Latest KEV listing: 23 Jun 2026

Watch Ubiquiti Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
UniFi OS In KEV: 3 CVEs: 3
AirOS In KEV: 1 CVEs: 1
UniFi Access Application In KEV: 0 CVEs: 1
UniFi Network application In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Ubiquiti CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 4
T1059Command and Scripting Interpreter CVEs: 2
T1098Account Manipulation CVEs: 1
T1005Data from Local System CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/ubiquiti.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Ubiquiti CVEs linked to the technique. Each link’s provenance is on the CVE page.

Ubiquiti CVEs

6 CVEs, by priority

CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation Vulnerability
Ubiquiti · UniFi OSKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
90.0%Top 0.21%
75.0priority
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control Vulnerability
Ubiquiti · UniFi OSKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application T1098Account Manipulation
88.3%Top 0.23%
75.0priority
CVE-2026-34909Ubiquiti UniFi OS Path Traversal Vulnerability
Ubiquiti · UniFi OSKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing Application T1005Data from Local System
68.0%Top 0.68%
74.9priority
CVE-2025-52665A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access…
Ubiquiti Inc · UniFi Access ApplicationPublic exploitCritical · 10.0
41.1%Top 1.3%
71.7priority
CVE-2010-5330Ubiquiti AirOS Command Injection Vulnerability
Ubiquiti · AirOSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter
40.2%Top 1.4%
69.6priority
CVE-2023-28365A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating…
Ubiquiti Inc. · UniFi Network application
0.9%Top 41%
48.6priority