CVE-2026-33000: Input Validation
Published May 22, 2026
·Updated
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Affected Software
2 affected components
Ubiquiti UniFi OS
UI Unifi Os Server<5.0.8
Remediation
Event History
May 22, 2026
CVE Published
via MITRE·12:43 AM
Data Sourced
via MITRE·12:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·12:00 PM
News Published
via BleepingComputer·12:03 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-33000?
CVE-2026-33000 has a severity rating of 9.1, classified as critical.
2
How does CVE-2026-33000 impact Ubiquiti UniFi OS devices?
CVE-2026-33000 allows a malicious actor with high privileges to execute command injection through improper input validation.
3
Who is affected by CVE-2026-33000?
CVE-2026-33000 affects users of Ubiquiti UniFi OS devices that are accessible on the network.
4
What are the possible consequences of CVE-2026-33000 exploitation?
Exploitation of CVE-2026-33000 could lead to unauthorized command execution, potentially compromising the device and network.
5
How can organizations mitigate the risks associated with CVE-2026-33000?
Organizations should ensure they update to the latest version of Ubiquiti UniFi OS that addresses CVE-2026-33000 as soon as possible.