CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability

Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-06-23. EPSS: 15.2% chance of exploitation in the next 30 days.

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

Affected products

  • UI Enterprise Fortress Gateway Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI Enterprise Network Video Recorder Core Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI Enterprise Network Video Recorder Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI Unas 2 Firmware: before 5.1.10 (fixed in 5.1.10)
  • UI Unas 4 Firmware: before 5.1.10 (fixed in 5.1.10)
  • UI Unas Pro 4 Firmware: before 5.1.10 (fixed in 5.1.10)
  • UI Unas Pro 8 Firmware: before 5.1.10 (fixed in 5.1.10)
  • UI Unas Pro Firmware: before 5.1.10 (fixed in 5.1.10)
  • UI UniFi Cloud Gateway Fiber Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloud Gateway Industrial Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloud Gateway Max Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloud Gateway Ultra Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloud Key Plus Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloudkey Enterprise Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Cloudkey Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Machine Beast Firmware: before 5.1.11 (fixed in 5.1.11)
  • UI UniFi Dream Machine Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Machine Pro Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Machine Pro Max Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Machine Special Edition Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Router 5g Max Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Router 7 Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Router Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Dream Wall Firmware: before 5.1.12 (fixed in 5.1.12)
  • UI UniFi Express 7 Firmware: before 5.1.12 (fixed in 5.1.12)
  • and 6 more

Published 2026-05-22. Last modified 2026-07-23.