CVE-2026-116837: Buffer Overflow
Published Oct 27, 2026
·Updated
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
Affected Software
4 affected components
Ubiquiti airMAX M
Ubiquiti LTU
Ubiquiti SolarPoint
Ubiquiti SolarSwitch
Event History
Oct 27, 2026
CVE Published
via MITRE·12:44 AM
Data Sourced
via MITRE·12:44 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which devices are in scope?
The affected product families are Ubiquiti airMAX M, LTU, SolarPoint, and SolarSwitch devices. No affected firmware versions are provided.
2
What level of access does an attacker need?
An attacker must have access to the adjacent network. The vulnerability does not require privileges or user interaction.
3
What could exploitation allow?
Successful exploitation could allow arbitrary code execution on the affected device. The stated impact includes high confidentiality, integrity, and availability impact.