Vulnerability intelligence
CVE-2026-34909
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
CVSS Score
10
Critical
EPSS — Exploit Probability
57%
Riskier than 99% of all CVEs
Exploitation
Confirmed in the wild
KEV since 2026-06-23
Remediation
unknown
Federal deadline 2026-06-26
8 articles across 4 outlets · first covered Jun 23, 2026 · latest Jun 24, 2026
Tracked incidents
Coverage timeline
-
CISA urges patching as hackers exploit critical Ubiquiti flawswww.securityweek.com · Jun 24, 2026
-
CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026securityaffairs.com · Jun 24, 2026
-
SmartRAT ClickFix targets Brazilian banks with AI spoofed domainssecurityonline.info · Jun 24, 2026
-
Lantronix, UniFi flaws surface as Outlook Mac reply glitch seensecurityonline.info · Jun 24, 2026
-
Google Search Now Saves Your Uploaded Media to Train AIsecurityonline.info · Jun 24, 2026
-
Flaw in AVer PTC500S cameras allows remote code executionsecurityonline.info · Jun 24, 2026
-
CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalogsecurityonline.info · Jun 24, 2026
-
CISA adds CVE-2026-34909 to KEV as UniFi OS flaw exploitedcisa.gov · Jun 23, 2026