ZeusQA
Start free

Known exploited vulnerabilities

Ubiquiti vulnerabilities attackers have used

Every Ubiquiti vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 4 Ubiquiti vulnerabilities as exploited in the wild, 3 of them added in the last 12 months. The most recent is CVE-2026-34910, added Jun 23, 2026. UniFi OS has the most entries (3).

In KEV, all time
4
Added, last 12 months
3
Used in ransomware
0
New CVEs this week
0

By product

UniFi OS (3), AirOS (1).

Every Ubiquiti entry in CISA KEV

  1. CVE-2026-34910

    Added · due

    Ubiquiti UniFi OS Improper Input Validation Vulnerability

    Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.

  2. CVE-2026-34909

    Added · due

    Ubiquiti UniFi OS Path Traversal Vulnerability

    Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.

  3. CVE-2026-34908

    Added · due

    Ubiquiti UniFi OS Improper Access Control Vulnerability

    Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.

  4. CVE-2010-5330

    Added · due

    Ubiquiti AirOS Command Injection Vulnerability

    Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works