Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-34910

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Description

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubiquiti Inc UniFi OS Server

Default version status: unaffected

  • 0 to < 5.0.8affected

Ubiquiti Inc UDM

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-SE

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Pro-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDM-Beast

Default version status: unaffected

  • 0 to < 5.1.11affected

Ubiquiti Inc EFG

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDW

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UDR-5G

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc Express 7

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-Instant

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNVR-G2-Pro

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc ENVR-Core

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UNAS-2

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-4

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UNAS-Pro-8

Default version status: unaffected

  • 0 to < 5.1.10affected

Ubiquiti Inc UCKP

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCK-Enterprise

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Ultra

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Max

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Fiber

Default version status: unaffected

  • 0 to < 5.1.12affected

Ubiquiti Inc UCG-Industrial

Default version status: unaffected

  • 0 to < 5.1.12affected

References