CVE-2026-34910

Name of the Vulnerable Software and Affected Versions UniFi OS (affected versions not specified)

Description An improper input validation issue exists in UniFi OS devices. A remote attacker with network access could exploit this flaw to perform command injection, allowing the execution of arbitrary commands. Additionally, the issue involves improper access control and incorrect directory path name restrictions, which could enable unauthorized access to protected information, as well as the ability to read, modify, or delete data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.