CyberSIXT Search
Vendor

Ubiquiti

No CISA KEV deadline is open. CISA last added a Ubiquiti CVE on 23 Jun.

Tracked since 19 Mar · latest article Wed 26 Aug · RSS

High exploit odds · current
1
high · not in KEV

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-34908UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 9 articles
CVE-2026-34909UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 8 articles
CVE-2026-34910UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 9 articles
CVE-2010-5330not in CyberSIXT coverageAirOS15 Apr 2022Deadline passed 6 May 2022Ransomware: Unknown · 0 articles

Products

10 products · 19 CVEs in coverage
UniFi OS3 CVEs · 3 in KEVlatest 24 JunAirOS0 CVEs · 1 in KEVUniFi OS Server5 CVEs · 0 in KEVlatest 26 AugUniFi Talk Application2 CVEs · 0 in KEVlatest 26 AugUniFi Protect Application2 CVEs · 0 in KEVlatest 26 Aug
5 more productsUniFi Access Application2 CVEs · 0 in KEVlatest 8 JulUniFi Network Application2 CVEs · 0 in KEVlatest 19 MarUniFi Connect Application1 CVEs · 0 in KEVlatest 8 JulUID Enterprise Agent1 CVEs · 0 in KEVlatest 12 JunUDM1 CVEs · 0 in KEVlatest 12 Jun

Coverage

18 articles · all timeFull timeline →

18 articles from 5 outlets since 19 Mar; the latest 60 days ago.

Ubiquiti: coverage over time18 articles from 5 outlets. First report 19 Mar by Security Affairs. Busiest week: 12 articles, week of 22 Jun. 0 in the last 7 days. Ubiquiti: coverage over time18 articles from 5 outlets. First report 19 Mar by Security Affairs. Busiest week: 12 articles, week of 22 Jun. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
Ubiquiti: articles
Published (UTC)OutletHeadline
Wed 26 Aug · 12:32 UTCSecurityOnlineUniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products
Wed 8 Jul · 21:48 UTCSecurity AffairsUbiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746
Wed 8 Jul · 14:17 UTCSOCRadarUbiquiti patches critical command injection flaw in UniFi Connect
Tue 7 Jul · 18:33 UTCSecurityOnlineUbiquiti fixes critical UniFi Connect app RCE flaw
Wed 24 Jun · 13:01 UTCSecurityWeekCISA urges patching as hackers exploit critical Ubiquiti flaws
Wed 24 Jun · 10:32 UTCSecurity AffairsCISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026
Wed 24 Jun · 08:13 UTCSecurityOnlineSmartRAT ClickFix targets Brazilian banks with AI spoofed domains
Wed 24 Jun · 04:11 UTCSecurityOnlineLantronix, UniFi flaws surface as Outlook Mac reply glitch seen
Wed 24 Jun · 04:11 UTCSecurityOnlineGoogle Search Now Saves Your Uploaded Media to Train AI
Wed 24 Jun · 03:41 UTCSecurityOnlineFlaw in AVer PTC500S cameras allows remote code execution
Wed 24 Jun · 02:02 UTCSecurityOnlineCISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog
Tue 23 Jun · 21:03 UTCCISACISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV list
Tue 23 Jun · 19:50 UTCCISACritical Ubiquiti UniFi OS flaw exploited in the wild, no patch
Tue 23 Jun · 19:47 UTCCISACISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910
Tue 23 Jun · 19:42 UTCCISACISA adds CVE-2026-34909 to KEV as UniFi OS flaw exploited
Tue 23 Jun · 19:41 UTCCISACISA Flags Critical UniFi OS Flaw as Actively Exploited, No Patch
Fri 12 Jun · 03:01 UTCSecurityOnlineUbiquiti UniFi OS flaws let attackers run commands on devices
Thu 19 Mar · 22:09 UTCSecurity AffairsCritical Ubiquiti UniFi UniFi security flaw allows potential account hijacking

Who reported 5 outlets, last 12 months

  • SecurityOnline8
  • CISA5
  • Security Affairs3
  • SecurityWeek1
  • SOCRadar1
See the full timeline
  1. UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti ProductsSecurityOnline
  2. Ubiquiti Fixes Severe UniFi OS Bugs, Including CVE-2026-50746Security Affairs
  3. Ubiquiti patches critical command injection flaw in UniFi ConnectSOCRadar
  4. Ubiquiti fixes critical UniFi Connect app RCE flawSecurityOnline
  5. CISA urges patching as hackers exploit critical Ubiquiti flawsSecurityWeek
  6. CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026Security Affairs
  7. SmartRAT ClickFix targets Brazilian banks with AI spoofed domainsSecurityOnline
  8. Lantronix, UniFi flaws surface as Outlook Mac reply glitch seenSecurityOnline
  9. Google Search Now Saves Your Uploaded Media to Train AISecurityOnline
  10. Flaw in AVer PTC500S cameras allows remote code executionSecurityOnline

All CVEs in coverage

19
CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityCVSS10.0CriticalExploited90%EPSS9articles
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityCVSS10.0CriticalExploited15%EPSS9articles
CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityCVSS10.0CriticalExploited1.8%EPSS8articles
CVE-2026-22557Ubiquiti Inc UniFi Network Application vulnerabilityCVSS10.0Critical–Not in KEV28%EPSS1article
CVE-2026-54402Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV1.8%EPSS1article
CVE-2026-50746Ubiquiti Inc UniFi Connect Application vulnerabilityCVSS10.0Critical–Not in KEV1.7%EPSS3articles
CVE-2026-77554Ubiquiti Inc UniFi Talk Application vulnerabilityCVSS10.0Critical–Not in KEV1.6%EPSS1article
CVE-2026-77537Ubiquiti Inc UniFi Protect Application vulnerabilityCVSS10.0Critical–Not in KEV1.6%EPSS1article
CVE-2026-50748Ubiquiti Inc UniFi Access Application vulnerabilityCVSS9.9Critical–Not in KEV1.6%EPSS1article
CVE-2026-47370Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV1.4%EPSS1article
CVE-2026-47367Ubiquiti Inc UID Enterprise Agent vulnerabilityCVSS9.9Critical–Not in KEV0.8%EPSS1article
CVE-2026-77550Ubiquiti Inc UniFi OS Server vulnerabilityCVSS10.0Critical–Not in KEV0.8%EPSS1article
7 more CVEs
CVE-2026-22558Ubiquiti Inc UniFi Network Application vulnerabilityCVSS7.7High–Not in KEV0.6%EPSS1article
CVE-2026-54400Ubiquiti Inc UniFi Access Application vulnerabilityCVSS9.1Critical–Not in KEV0.5%EPSS1article
CVE-2026-47368Ubiquiti Inc UniFi OS Server vulnerabilityCVSS8.6High–Not in KEV0.5%EPSS1article
CVE-2026-50747Ubiquiti Inc UniFi Talk Application vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-47369Ubiquiti Inc UniFi OS Server vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-55115Ubiquiti Inc UniFi Protect Application vulnerabilityCVSS9.9Critical–Not in KEV0.5%EPSS1article
CVE-2026-48610Ubiquiti Inc UDM vulnerabilityCVSS8.1High–Not in KEV0.4%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device