CISA has identified four actively exploited vulnerabilities affecting Ubiquiti UniFi OS and Lantronix EDS5000 devices as of June 23, 2026. The vulnerabilities are critically rated, with CVSS scores reaching 10.0. Details include: 1) CVE-2026-34908: Improper Access Control; 2) CVE-2026-34909: Path Traversal; 3) CVE-2026-34910: Improper Input Validation; and 4) CVE-2025-67038: Code Injection. Users are urged to update their systems by June 26, 2026, to mitigate risks, as intrusions could lead to unauthorized control of devices.
CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog
CyberSIXT Evidence Panel
Article by CyberSIXT
Timeline Coverage
Swipe to explore timeline
-
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
securityweek.com
-
CISA warns of active attacks on Lantronix EDS5000 critical flaw
thehackernews.com
-
CISA urges patching as hackers exploit critical Ubiquiti flaws
-
CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026
securityaffairs.com
-
SmartRAT ClickFix targets Brazilian banks with AI spoofed domains
securityonline.info
-
Google Search Now Saves Your Uploaded Media to Train AI
-
Lantronix, UniFi flaws surface as Outlook Mac reply glitch seen
-
Flaw in AVer PTC500S cameras allows remote code execution
-
CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog
-
CISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV list
cisa.gov
-
CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910