Login Request a demo
UO
Product
UniFi OS
by Ubiquiti · last CVE May 22, 2026
On CISA KEVExploited in the wild
4
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities4In the news4Timeline
Severity mix
Critical 4High 0Medium 0Low 0
Severity
All severities4Critical4High0Medium0Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add UniFi OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34910
In wildKEV
10.0
90%
May 22
Ubiquiti UniFi OS Improper Input Validation Vulnerability
Affected: All versions, or not specified
CVE-2026-34908
In wildKEV
10.0
88%
May 22
Ubiquiti UniFi OS Improper Access Control Vulnerability
Affected: All versions, or not specified
CVE-2026-34909
In wildKEV
10.0
68%
May 22
Ubiquiti UniFi OS Path Traversal Vulnerability
Affected: All versions, or not specified
CVE-2023-31997
9.0
0%
Jun 30
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB
Affected: 3.1 through 3.1.13
Showing 4