CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerability
Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-06-23. EPSS: 45.8% chance of exploitation in the next 30 days.
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Affected products
- UI Enterprise Fortress Gateway Firmware: before 5.1.12 (fixed in 5.1.12)
- UI Enterprise Network Video Recorder Core Firmware: before 5.1.12 (fixed in 5.1.12)
- UI Enterprise Network Video Recorder Firmware: before 5.1.12 (fixed in 5.1.12)
- UI Unas 2 Firmware: before 5.1.10 (fixed in 5.1.10)
- UI Unas 4 Firmware: before 5.1.10 (fixed in 5.1.10)
- UI Unas Pro 4 Firmware: before 5.1.10 (fixed in 5.1.10)
- UI Unas Pro 8 Firmware: before 5.1.10 (fixed in 5.1.10)
- UI Unas Pro Firmware: before 5.1.10 (fixed in 5.1.10)
- UI UniFi Cloud Gateway Fiber Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloud Gateway Industrial Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloud Gateway Max Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloud Gateway Ultra Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloud Key Plus Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloudkey Enterprise Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Cloudkey Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Machine Beast Firmware: before 5.1.11 (fixed in 5.1.11)
- UI UniFi Dream Machine Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Machine Pro Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Machine Pro Max Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Machine Special Edition Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Router 5g Max Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Router 7 Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Router Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Dream Wall Firmware: before 5.1.12 (fixed in 5.1.12)
- UI UniFi Express 7 Firmware: before 5.1.12 (fixed in 5.1.12)
- and 6 more
Published 2026-05-22. Last modified 2026-07-23.