LiveThreat Vulnerability Brief — CVE-2026-21633
What It Is — A missing‑encryption flaw in the Ubiquiti AI Pro discovery protocol permits unauthenticated, network‑adjacent attackers to downgrade the communication protocol to an unencrypted mode. Exploitability — Proof‑of‑concept code is publicly available; no known active ransomware‑style exploit, CVSS 5.4 (Moderate).
Affected Products — Ubiquiti Networks AI Pro devices.
TPRM Impact — Organizations that embed AI Pro in their infrastructure face potential data exposure and downstream service manipulation, creating a supply‑chain risk for third‑party customers.
Recommended Actions — Deploy Ubiquiti’s security patch immediately; if patching is delayed, disable the discovery protocol, segment AI Pro devices onto isolated VLANs, monitor for protocol‑downgrade traffic, and update asset inventories. Source: Zero Day Initiative advisory