Actively exploited vulnerabilities affecting Ubiquiti products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-34908https://wildfortech.com/security#CVE-2026-34908This vulnerability in Ubiquiti's UniFi OS allows an attacker who already has network access to make unauthorized changes to the system without proper authorization. Because UniFi OS underpins a wide range of Ubiquiti networking hardware, exploitation could let an insider threat or a lateral-moving attacker silently reconfigure network infrastructure — potentially redirecting traffic, disabling security controls, or setting up persistent footholds — without needing elevated credentials.Tue, 23 Jun 2026 00:00:00 GMTUbiquitiUniFi OShttps://wildfortech.com/security#CVE-2026-34909https://wildfortech.com/security#CVE-2026-34909This path traversal flaw in Ubiquiti UniFi OS lets an attacker on the same network read files outside intended directories on the underlying system. Those accessible files could expose credentials or configuration data that an attacker could then exploit to compromise system accounts. Because exploitation requires only network access rather than authentication, any device running a vulnerable UniFi OS version that is reachable on the network is at meaningful risk of account takeover.Tue, 23 Jun 2026 00:00:00 GMTUbiquitiUniFi OShttps://wildfortech.com/security#CVE-2026-34910https://wildfortech.com/security#CVE-2026-34910UniFi OS, the platform powering Ubiquiti's popular network management devices, fails to properly validate user input, opening a path for command injection. An attacker who can reach the device on the network — without needing physical access — could potentially execute arbitrary commands on the underlying system. This is serious for organizations using UniFi hardware for network infrastructure, as successful exploitation could give an attacker control over routing, switching, or wireless management functions.Tue, 23 Jun 2026 00:00:00 GMTUbiquitiUniFi OS