Dashboard / CVE-2026-34909

CVE-2026-34909

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the network to access files on the underlying system that could be manipulated to access an underlying account.

CISA Known Exploited Vulnerability

Vendor / Product Ubiquiti — UniFi OS
Date Added 2026-06-23
Remediation Due 2026-06-26
https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909

Weakness Classification (1)

Affected Software (32)

VendorProductVersion
ui enterprise_fortress_gateway_firmware < 5.1.12
ui enterprise_network_video_recorder_core_firmware < 5.1.12
ui enterprise_network_video_recorder_firmware < 5.1.12
ui unas_2_firmware < 5.1.10
ui unas_4_firmware < 5.1.10
ui unas_pro_4_firmware < 5.1.10
ui unas_pro_8_firmware < 5.1.10
ui unas_pro_firmware < 5.1.10
ui unifi_cloud_gateway_fiber_firmware < 5.1.12
ui unifi_cloud_gateway_industrial_firmware < 5.1.12
ui unifi_cloud_gateway_max_firmware < 5.1.12
ui unifi_cloud_gateway_ultra_firmware < 5.1.12
ui unifi_cloud_key_plus_firmware < 5.1.12
ui unifi_cloudkey_enterprise_firmware < 5.1.12
ui unifi_cloudkey_firmware < 5.1.12
ui unifi_dream_machine_beast_firmware < 5.1.11
ui unifi_dream_machine_firmware < 5.1.12
ui unifi_dream_machine_pro_firmware < 5.1.12
ui unifi_dream_machine_pro_max_firmware < 5.1.12
ui unifi_dream_machine_special_edition_firmware < 5.1.12
ui unifi_dream_router_5g_max_firmware < 5.1.12
ui unifi_dream_router_7_firmware < 5.1.12
ui unifi_dream_router_firmware < 5.1.12
ui unifi_dream_wall_firmware < 5.1.12
ui unifi_express_7_firmware < 5.1.12
ui unifi_express_firmware < 4.0.14
ui unifi_network_video_recorder_firmware < 5.1.12
ui unifi_network_video_recorder_g2_firmware < 5.1.12
ui unifi_network_video_recorder_g2_pro_firmware < 5.1.12
ui unifi_network_video_recorder_instant_firmware < 5.1.12
Showing 30 of 32 entries

References & Advisories (3)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

68.03%
Raw Score 0.680330
Percentile 99.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.68033
2026-10-28
0.68033

Intelligence Sources

kev ref →

External Links