Skip to content
OriginalSign in

CISA

CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910

Part of the CVE-2026-34910 story · since 23 Jun

Quiet for 20 weekslast report 24 Jun9 articles4 outlets
23 Jun · CISA first10 Aug3 Sep27 SepNowThis article2nd of 9
  • Tue 23 Jun, 19:41 UTC. CISA, first report. CISA Flags Critical UniFi OS Flaw as Actively Exploited, No Patch. Cites a CVE in CISA KEV.
  • Tue 23 Jun, 19:47 UTC. CISA. CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910. Cites a CVE in CISA KEV. This article, 2nd of 9.
  • Wed 24 Jun, 02:02 UTC. SecurityOnline, its first report on the story. CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 03:41 UTC. SecurityOnline. Flaw in AVer PTC500S cameras allows remote code execution. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 04:11 UTC. SecurityOnline. Google Search Now Saves Your Uploaded Media to Train AI. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 04:11 UTC. SecurityOnline. Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 08:13 UTC. SecurityOnline. SmartRAT ClickFix targets Brazilian banks with AI spoofed domains. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 10:32 UTC. Security Affairs, its first report on the story. CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 13:01 UTC. SecurityWeek, its first report on the story. CISA urges patching as hackers exploit critical Ubiquiti flaws. Cites a CVE in CISA KEV.

The Known Exploited Vulnerabilities (KEV) Catalog is maintained by CISA as a resource for the cybersecurity community to help organizations manage vulnerabilities that are actively exploited. It highlights the importance of using the catalog for vulnerability management and provides a way to report new vulnerabilities. The specific entry mentioned is for CVE-2026-34910, a vulnerability in Ubiquiti UniFi OS related to improper input validation.

CISA recommends applying vendor mitigation strategies and adhering to BOD 26-04 patching guidelines. The entry also includes dates of addition and due date for mitigation.

How the story developed

All 9 articles
Quiet for 20 weekslast report 24 Jun9 articles4 outlets

9 articles from 4 outlets since 23 Jun. Quiet since 24 Jun. This was the 2nd report, within the hour.

Now23 Jun2425268 Nov9First reportCISA · 23 Jun, 19:41
  • Tue 23 Jun, 19:41 UTC. CISA, first report. CISA Flags Critical UniFi OS Flaw as Actively Exploited, No Patch. Cites a CVE in CISA KEV.
  • Tue 23 Jun, 19:47 UTC. CISA. CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910. Cites a CVE in CISA KEV. This article, 2nd of 9.
  • Wed 24 Jun, 02:02 UTC. SecurityOnline, its first report on the story. CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 03:41 UTC. SecurityOnline. Flaw in AVer PTC500S cameras allows remote code execution. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 04:11 UTC. SecurityOnline. Google Search Now Saves Your Uploaded Media to Train AI. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 04:11 UTC. SecurityOnline. Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 08:13 UTC. SecurityOnline. SmartRAT ClickFix targets Brazilian banks with AI spoofed domains. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 10:32 UTC. Security Affairs, its first report on the story. CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026. Cites a CVE in CISA KEV.
  • Wed 24 Jun, 13:01 UTC. SecurityWeek, its first report on the story. CISA urges patching as hackers exploit critical Ubiquiti flaws. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 9 articles as a list
  1. Tue 23 JunDay 02
    1. CISA Flags Critical UniFi OS Flaw as Actively Exploited, No Patch19:41 · CISA · official · First report · CISA alert · Known exploited CVE
    2. CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-3491019:47 · CISA · official · Known exploited CVE · This article, 2nd of 9
  2. Wed 24 JunDay 17
    1. CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog02:02 · SecurityOnline · Known exploited CVE
    2. Flaw in AVer PTC500S cameras allows remote code execution03:41 · SecurityOnline · Known exploited CVE
    3. Google Search Now Saves Your Uploaded Media to Train AI04:11 · SecurityOnline · Known exploited CVE
    Show 4 more from 24 Jun
    1. Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen04:11 · SecurityOnline · Known exploited CVE
    2. SmartRAT ClickFix targets Brazilian banks with AI spoofed domains08:13 · SecurityOnline · Known exploited CVE
    3. CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 202610:32 · Security Affairs · Known exploited CVE
    4. CISA urges patching as hackers exploit critical Ubiquiti flaws13:01 · SecurityWeek · Known exploited CVE

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in