UI Airmax Ac Firmware vulnerabilities

3 CVEs affecting UI Airmax Ac Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21639, published 2026-01-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-9266, published 2018-09-05. Critical severity, CVSS 9.8. EPSS: 74% chance of exploitation in the next 30 days. The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory…
CVE-2022-44565, published 2022-12-23. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and…
CVE-2026-21639, published 2026-01-08. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.