Product by Ubiquiti
Ubiquiti UniFi Dream Machine Firmware (UDM)
8 known vulnerabilities in Ubiquiti UniFi Dream Machine Firmware (UDM) (Ubiquiti), 3 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-34910 | Ubiquiti UniFi OS Improper Input Validation Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34908 | Ubiquiti UniFi OS Improper Access Control Vulnerability In CISA KEValso in 62 other products | 10.0 | |
| Critical | CVE-2026-34909 | Ubiquiti UniFi OS Path Traversal Vulnerability In CISA KEValso in 63 other products | 10.0 | |
| Critical | CVE-2026-54402 | Ubiquiti UniFi OS Server: Improper Input Validation | 9.9 | |
| High | CVE-2026-54403 | Ubiquiti UniFi OS Server: Path Traversal | 8.6 | |
| High | CVE-2026-54404 | Ubiquiti UniFi OS Server: SQL Injection | 8.8 | |
| High | CVE-2026-34911 | Ubiquiti UniFi OS Server: Path Traversal | 7.7 | |
| High | CVE-2026-54401 | Ubiquiti UniFi OS Server: Server-Side Request Forgery (SSRF) | 7.7 |
News
- Ubiquiti Patches Critical UniFi Vulnerabilitiessans-newsbites-mail,
- KEV: Lantronix, Ubiquiti UniFi OS, PTC Windchill and FlexPLM, and Cisco Unified Communications Managersans-newsbites-mail,
- Patch UniFi OS for Three CVSS 10.0 Flawssans-newsbites-mail,