Product by Ubiquiti

    Ubiquiti UniFi Dream Machine Pro Max Firmware (UDM-Pro-Max)

    10 known vulnerabilities in Ubiquiti UniFi Dream Machine Pro Max Firmware (UDM-Pro-Max) (Ubiquiti), 3 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ubiquiti UniFi Dream Machine Pro Max Firmware (UDM-Pro-Max) (Ubiquiti)
    CriticalCVE-2026-34910

    Ubiquiti UniFi OS Improper Input Validation Vulnerability

    In CISA KEValso in 62 other products

    		10.0
    CriticalCVE-2026-34908

    Ubiquiti UniFi OS Improper Access Control Vulnerability

    In CISA KEValso in 62 other products

    		10.0
    CriticalCVE-2026-34909

    Ubiquiti UniFi OS Path Traversal Vulnerability

    In CISA KEValso in 63 other products

    		10.0
    CriticalCVE-2026-54402

    Ubiquiti UniFi OS Server: Improper Input Validation

    also in 43 other products

    		9.9
    HighCVE-2026-54403

    Ubiquiti UniFi OS Server: Path Traversal

    also in 43 other products

    		8.6
    HighCVE-2026-54404

    Ubiquiti UniFi OS Server: SQL Injection

    also in 43 other products

    		8.8
    HighCVE-2026-34911

    Ubiquiti UniFi OS Server: Path Traversal

    also in 62 other products

    		7.7
    HighCVE-2026-54401

    Ubiquiti UniFi OS Server: Server-Side Request Forgery (SSRF)

    also in 43 other products

    		7.7
    HighCVE-2026-55112

    Ubiquiti Dream Machines: Improper Access Control

    also in 25 other products

    		7.5
    HighCVE-2026-55110

    Ubiquiti UniFi OS Server: Permissive Cross-domain Security Policy with Untrusted Domains

    also in 41 other products

    		7.5

    News

    All products by Ubiquiti