Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-34908

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

Description

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc UniFi OS Server

Default version status: unaffected

  • 0 to < 5.0.8affected

Ubiquiti Inc UDM

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-SE

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Beast

Default version status: unaffected

  • 0 to < 5.1.11affected

Ubiquiti Inc EFG

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDW

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR-5G

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc Express 7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Instant

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR-Core

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNAS-2

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-8

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UCKP

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK-Enterprise

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Ultra

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Fiber

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Industrial

Default version status: unaffected

  • 0 to < 5.1.12affected

References