CyberSIXT Search
Ubiquiti product

UniFi OS

← All Ubiquiti products

No CISA KEV deadline is open. CISA last added a UniFi OS CVE on 23 Jun.

Tracked since 23 Jun · latest article Wed 24 Jun · RSS

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-34908UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 9 articles
CVE-2026-34909UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 8 articles
CVE-2026-34910UniFi OS23 JunDeadline passed 26 JunRansomware: Unknown · 9 articles

Coverage

12 articles · all timeFull timeline →

12 articles from 4 outlets since 23 Jun; the latest 124 days ago.

UniFi OS: coverage over time12 articles from 4 outlets. First report 23 Jun by CISA. Busiest week: 12 articles, week of 22 Jun. 0 in the last 7 days. UniFi OS: coverage over time12 articles from 4 outlets. First report 23 Jun by CISA. Busiest week: 12 articles, week of 22 Jun. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
UniFi OS: articles
Published (UTC)OutletHeadline
Wed 24 Jun · 13:01 UTCSecurityWeekCISA urges patching as hackers exploit critical Ubiquiti flaws
Wed 24 Jun · 10:32 UTCSecurity AffairsCISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026
Wed 24 Jun · 08:13 UTCSecurityOnlineSmartRAT ClickFix targets Brazilian banks with AI spoofed domains
Wed 24 Jun · 04:11 UTCSecurityOnlineLantronix, UniFi flaws surface as Outlook Mac reply glitch seen
Wed 24 Jun · 04:11 UTCSecurityOnlineGoogle Search Now Saves Your Uploaded Media to Train AI
Wed 24 Jun · 03:41 UTCSecurityOnlineFlaw in AVer PTC500S cameras allows remote code execution
Wed 24 Jun · 02:02 UTCSecurityOnlineCISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog
Tue 23 Jun · 21:03 UTCCISACISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV list
Tue 23 Jun · 19:50 UTCCISACritical Ubiquiti UniFi OS flaw exploited in the wild, no patch
Tue 23 Jun · 19:47 UTCCISACISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910
Tue 23 Jun · 19:42 UTCCISACISA adds CVE-2026-34909 to KEV as UniFi OS flaw exploited
Tue 23 Jun · 19:41 UTCCISACISA Flags Critical UniFi OS Flaw as Actively Exploited, No Patch

Who reported 4 outlets, last 12 months

  • CISA5
  • SecurityOnline5
  • Security Affairs1
  • SecurityWeek1
See the full timeline
  1. CISA urges patching as hackers exploit critical Ubiquiti flawsSecurityWeek
  2. CISA flags Ubiquiti, Lantronix flaws; urges US patch by June 2026Security Affairs
  3. SmartRAT ClickFix targets Brazilian banks with AI spoofed domainsSecurityOnline
  4. Lantronix, UniFi flaws surface as Outlook Mac reply glitch seenSecurityOnline
  5. Google Search Now Saves Your Uploaded Media to Train AISecurityOnline
  6. Flaw in AVer PTC500S cameras allows remote code executionSecurityOnline
  7. CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV CatalogSecurityOnline
  8. CISA adds Ubiquiti UniFi OS flaw CVE-2026-34908 to KEV listCISA · official notice
  9. Critical Ubiquiti UniFi OS flaw exploited in the wild, no patchCISA · official notice
  10. CISA flags active exploit in Ubiquiti UniFi OS CVE-2026-34910CISA · official notice

All CVEs in coverage

3
CVE-2026-34910Ubiquiti UniFi OS Improper Input Validation VulnerabilityCVSS10.0CriticalExploited90%EPSS9articles
CVE-2026-34908Ubiquiti UniFi OS Improper Access Control VulnerabilityCVSS10.0CriticalExploited15%EPSS9articles
CVE-2026-34909Ubiquiti UniFi OS Path Traversal VulnerabilityCVSS10.0CriticalExploited1.8%EPSS8articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device