Vendor
Ubiquiti vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 59 vulnerabilities in Ubiquiti: 6 in the last 7 days and 48 in the last 90 days, 34 of them critical and 4 exploited in the wild. The most recent, CVE-2026-95862, was published on 22 September 2026. 22 technologies have a page of their own.
- Last 7 days
- 6
- Last 90 days
- 48
- Critical, all time
- 34
- Exploited in the wild
- 4
About Ubiquiti
Ubiquiti is a technology company that manufactures wireless data communication products and wired networking solutions for enterprise and home use.
Ubiquiti technologies
- Ubiquiti UniFi OS21
- Ubiquiti Cloud Gateway7
- Ubiquiti Dream Machine7
- Ubiquiti Dream Router7
- Ubiquiti Dream Wall7
- Ubiquiti Cloud Key6
- Ubiquiti Enterprise Firewall Core6
- Ubiquiti Enterprise Video Recorder6
- Ubiquiti Network Video Recorder6
- Ubiquiti UniFi Gateway6
- Ubiquiti UniFi Network Application6
- Ubiquiti UniFi Protect5
- Ubiquiti UniFi Access4
- Ubiquiti Enterprise Fortress Gateway3
- Ubiquiti UniFi Dream Machine Pro3
- Ubiquiti UniFi Dream Machine Pro Max3
- Ubiquiti UniFi Dream Machine Special Edition3
- Ubiquiti UniFi Dream Router 5G3
- Ubiquiti UniFi Dream Router 73
- Ubiquiti UniFi Dream Wall3
- Ubiquiti UniFi Protect Application3
- Ubiquiti UniFi Talk Application3
Latest Ubiquiti vulnerabilities
- CVE-2026-95862: Ubiquiti UniFi gateway out-of-bounds write denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-95861: Ubiquiti UniFi Gateway uncontrolled recursion denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-77558: Ubiquiti UniFi Gateway out-of-bounds read DoShighCVSS 7.5EPSS 0.5%
- CVE-2026-77556: Ubiquiti UniFi gateway out-of-bounds read denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-77555: Ubiquiti UniFi Gateway out-of-bounds write denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-77544: Ubiquiti UniFi Gateway out-of-bounds write denial of servicehighCVSS 7.5EPSS 0.5%
- CVE-2026-77557: Ubiquiti UniFi Protect AI Key privilege escalation via improper access controlcriticalCVSS 9.8EPSS 0.5%
- CVE-2026-77554: Ubiquiti UniFi Talk command injectioncriticalCVSS 10EPSS 1.6%
- CVE-2026-77553: Ubiquiti UniFi Access privilege escalationcriticalCVSS 9.9EPSS 0.4%
- CVE-2026-77552: Ubiquiti UniFi Enterprise Audio/Video Bridge command injectioncriticalCVSS 9.8EPSS 1.6%
- CVE-2026-77551: Ubiquiti UniFi Connect Display Cast Pro privilege escalationcriticalCVSS 9EPSS 0.4%
- CVE-2026-77550: Ubiquiti UniFi OS CRLF injection authentication bypasscriticalCVSS 10EPSS 0.8%
- CVE-2026-77549: Ubiquiti UniFi OS CRLF injection authentication bypasscriticalCVSS 9EPSS 0.5%
- CVE-2026-77548: Ubiquiti UniFi Protect command injection via input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77547: Ubiquiti UniFi Access command injection in input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77546: Ubiquiti UniFi Access command injection via improper input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77532: Ubiquiti EdgeMax EdgeSwitch buffer overflow in DHCPv6criticalCVSS 9.6EPSS 0.4%
- CVE-2026-77545: Ubiquiti UniFi OS active debug code privilege escalationcriticalCVSS 9EPSS 0.4%
- CVE-2026-77543: Ubiquiti UniFi Access command injection via improper input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77542: Ubiquiti UID Enterprise Agent command injection in input validationcriticalCVSS 9.1EPSS 1.3%
- CVE-2026-77541: Ubiquiti UniFi Network Application privilege escalationcriticalCVSS 9.1EPSS 0.5%
- CVE-2026-77540: Ubiquiti UniFi OS command injection vulnerabilitycriticalCVSS 9.1EPSS 1.3%
- CVE-2026-77539: Ubiquiti UniFi OS command injection in input validationcriticalCVSS 9.1EPSS 1.3%
- CVE-2026-77537: Ubiquiti UniFi Protect command injection via improper input validationcriticalCVSS 10EPSS 1.6%
- CVE-2026-77536: Ubiquiti UniFi OS privilege escalation in access controlcriticalCVSS 9.9EPSS 0.4%
Most severe Ubiquiti vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-34910: Ubiquiti UniFi OS command injection via improper input validationcriticalexploited in the wildCVSS 10EPSS 33.6%
- CVE-2026-34909: Ubiquiti UniFi OS path traversal in underlying system filescriticalexploited in the wildCVSS 10EPSS 0.9%
- CVE-2026-34908: Ubiquiti UniFi OS improper access controlcriticalexploited in the wildCVSS 10EPSS 0.9%
- CVE-2010-5330: Ubiquiti AirOS Command Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2026-77554: Ubiquiti UniFi Talk command injectioncriticalCVSS 10EPSS 1.6%
- CVE-2026-77537: Ubiquiti UniFi Protect command injection via improper input validationcriticalCVSS 10EPSS 1.6%
- CVE-2026-77550: Ubiquiti UniFi OS CRLF injection authentication bypasscriticalCVSS 10EPSS 0.8%
- CVE-2026-77548: Ubiquiti UniFi Protect command injection via input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77547: Ubiquiti UniFi Access command injection in input validationcriticalCVSS 9.9EPSS 1.4%
- CVE-2026-77546: Ubiquiti UniFi Access command injection via improper input validationcriticalCVSS 9.9EPSS 1.4%
Vulnerabilities per week
The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 29 Jun 2026 | 20 | 4 | |
| 6 Jul 2026 | 0 | 0 | |
| 13 Jul 2026 | 0 | 0 | |
| 20 Jul 2026 | 0 | 0 | |
| 27 Jul 2026 | 0 | 0 | |
| 3 Aug 2026 | 0 | 0 | |
| 10 Aug 2026 | 0 | 0 | |
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 22 | 22 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 6 | 0 |
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/ubiquiti.json, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Ubiquiti vulnerabilities", https://junglewise.ai/threats/vendors/ubiquiti, 27 September 2026.