Ubiquitously bad: CVSS-10 Ubiquiti bugs exploited in the wild

The self-hosted wireless and wired networking OS had three stinkers that are being actively exploited, but newer versions are safe.

By Kiera Fields

Jun 24, 2026 5:57 PM 3 min read

Ubiquitously bad: CVSS-10 Ubiquiti bugs exploited in the wild — Image credit: https://unsplash.com/@davidfucsku

A trio of critical vulnerabilities in Ubiquiti networking software are being exploited in the wild, CISA warned this week.

The bugs — described as CVE-2026-34908, CVE-2026-34909 and CVE-2026-34910 — all impact UniFi OS devices, hardware consoles, and Cloud Gateways that run Ubiquiti's UniFi operating system, and can be exploited via network access.

All three have a CVSS score of 10 — the highest possible score — and were added to the Known Exploited Vulnerabilities catalog on Tuesday, June 23, but they have yet to be flagged as used in ransomware campaigns. Ubiquiti published a security bulletin with patched version updates for all three on May 22.

This content is for members only

Already have an account? Sign in

Add The Stack on Google

Kiera Fields

Kiera Fields is head of special projects at The Stack and was previously at Business Insider. She writes about leadership, tech and business, covering everything from earnings calls to C-suite interviews.