CVE-2026-34910

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Affected products

Unifi Os

Ui Unifi Os Server

< 5.0.8

CVSS 3.1

10.0 CRITICAL

EPSS

87.0% (100th percentile)

Weakness

CWE-20

NVD status

Analyzed

Published

2026-05-22