Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-21639

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected

Description

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc airMAX AC

Default version status: unaffected

  • 0 to < 8.7.21affected

Ubiquiti Inc airMAX M

Default version status: unaffected

  • 0 to < 6.3.24affected

Ubiquiti Inc airFiber AF60-XG

Default version status: unaffected

  • 0 to < 1.2.3affected

Ubiquiti Inc airFiber AF60

Default version status: unaffected

  • 0 to < 2.6.8affected

References