Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-116839

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Ubiquiti

Description

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc airMAX M

Default version status: unaffected

  • 0 to < 6.3.26affected

References