Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Ubiquiti UniFi OS security updates (multiple vulnerabilities)

Security Patch Release
First reported
Last updated
Happening score
H score 28
2 unique sources, 4 articles

Summary

Hide ▲

Ubiquiti released security updates for UniFi OS to close five vulnerabilities, including three maximum-severity flaws that could let remote attackers without privileges alter systems or reach files and commands.

Related Happenings

Ubiquiti UniFi Connect, Talk, Access, Protect, and OS security patch release (multiple vulnerabilities)

Security Patch Release
H score45 First: 08.07.2026 17:38 Last: 08.07.2026 17:38 Sources 1

About this happening: Ubiquiti shipped updates for UniFi Connect, UniFi Talk, UniFi Access, UniFi Protect, and UniFi OS, closing multiple critical vulnerabilities that could enable pr...

Open Happening

Ubiquiti UniFi OS security patch release for CVE-2026-34908/34909/34910

Security Patch Release
H score53 First: 24.06.2026 20:19 Last: 24.06.2026 20:19 Sources 1

About this happening: Ubiquiti released UniFi OS patches for CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910, closing three maximum-severity defects tied to in-the-wild exploitatio...

Open Happening

F5 BIG-IP APM active exploitation wave (CVE-2025-53521)

Exploitation Wave
H score79 First: 02.04.2026 11:25 Last: 02.04.2026 11:25 Sources 1

About this happening: As of 2026-04-02, ongoing attacks are exploiting CVE-2025-53521 against F5 BIG-IP APM systems, leaving more than 14,000 exposed online and at risk of remote code e...

Open Happening

MongoDB CVE-2025-14847 active exploitation worldwide

Exploitation Wave
H score39 First: 29.12.2025 09:49 Last: 29.12.2025 09:49 Sources 1

About this happening: CVE-2025-14847 is being actively exploited against MongoDB deployments, putting a global pool of 87,000+ potentially susceptible instances at risk. The wave matter...

Open Happening

F5 BIG-IP and related products October 2025 security updates (44 vulnerabilities)

Security Patch Release
H score63 First: 15.10.2025 21:01 Last: 15.10.2025 21:01 Sources 1

About this happening: F5 released October 2025 security updates for BIG-IP and related products, patching 44 vulnerabilities and urging customers to update immediately. The bundle inclu...

Open Happening

Timeline

  1. 24.06.2026 15:32 2 articles · 21d ago

    CISA warns of in-the-wild exploitation of Ubiquiti UniFi OS flaws

    Exploitation Observed

    CISA warned that threat actors were targeting CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 in Ubiquiti UniFi OS devices after the flaws were patched in UniFi OS Server 5.0.8, and multiple users reported that the bugs were exploited in the wild, likely as zero-days, to create rogue administrator accounts named John Sim.

    Show sources
    Open in new tab
  2. 08.06.2026 18:51 1 articles · 1mo ago

    Bishop Fox validates unauthenticated root RCE chain in UniFi OS Server

    Technical Analysis Update

    Bishop Fox researchers validated a chain of CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 against Ubiquiti UniFi OS Server 5.0.6, showing that CVE-2026-34908 and CVE-2026-34909 can bypass authentication and reach a vulnerable endpoint where CVE-2026-34910 enables command injection, with the affected service account’s sudo privileges making root shell access trivial and no credentials or user interaction required. The researchers also released a free detection script, advised hunting for requests to /api/auth/validate-sso/ and ucs/update/latest_package plus suspicious ucs-update child processes and unexpected sudo commands, and said the chain does not work on UniFi OS Server 5.0.8 or later.

    Show sources
    Open in new tab
  3. 22.05.2026 15:00 2 articles · 1mo ago

    Ubiquiti releases UniFi OS security updates

    Initial Disclosure

    Ubiquiti released security updates for UniFi OS on 2026-05-22 to address five vulnerabilities, including CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, CVE-2026-33000, and CVE-2026-34911. The flaws could let remote attackers without privileges make unauthorized changes, access files through path traversal, or launch command injection after network access, and Ubiquiti said the issues were reported through its HackerOne bug bounty program and had not been disclosed as exploited in the wild. Censys was tracking nearly 100,000 Internet-exposed UniFi OS endpoints, including nearly 50,000 IP addresses in the United States.

    Show sources
    Open in new tab