CVE-2021-22909: UI Edgemax Edgerouter Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.

Affected products

• UI Edgemax Edgerouter Firmware: up to and including 2.0.9

Published 2021-05-27. Last modified 2026-06-17.