CVE-2026-34908

An attacker with access to the network where UniFi OS devices operate can exploit improperly implemented access control to perform system operations without required authentication or authorization. The vulnerability does not require user interaction or special privileges, and its scope covers components beyond the directly attacked system (scope: changed). The network vector and lack of prerequisites make the exploit relatively easy to perform from the local network level or potentially broader reach.

An attacker can make unauthorized changes to the configuration or operation of UniFi OS, which may lead to violations of confidentiality, integrity, and availability of the device and the network infrastructure it supports.

Apply patches available from the manufacturer according to the references — detailed patch versions are available in the Ubiquiti security advisory: https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b

Devices running UniFi OS — detailed information about affected versions is indicated in the manufacturer's references (Security Advisory Bulletin 064)

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.