CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerability
Published May 22, 2026
·Updated
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
Other sources
Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.
— CISA
Affected Software
63 affected components
Ubiquiti UniFi OS
Ubiquiti UniFi OS
UI Unifi Os Server<5.0.8
All of the following
UI Unifi Cloud Gateway Industrial Firmware<5.1.12
UI Unifi Cloud Gateway Industrial
All of the following
UI Unifi Dream Machine Firmware<5.1.12
UI Unifi Dream Machine
All of the following
UI Unifi Dream Machine Pro Firmware<5.1.12
UI UniFi Dream Machine Pro
All of the following
UI Unifi Dream Machine Special Edition Firmware<5.1.12
UI Unifi Dream Machine Special Edition
All of the following
UI Unifi Dream Machine Pro Max Firmware<5.1.12
UI Unifi Dream Machine Pro Max
All of the following
UI Enterprise Fortress Gateway Firmware<5.1.12
UI Enterprise Fortress Gateway
All of the following
UI Unifi Dream Wall Firmware<5.1.12
UI Unifi Dream Wall
All of the following
UI Unifi Dream Router Firmware<5.1.12
UI Unifi Dream Router
All of the following
UI Unifi Dream Router 7 Firmware<5.1.12
UI Unifi Dream Router 7
All of the following
UI Unifi Express 7 Firmware<5.1.12
UI Unifi Express 7
All of the following
UI Unifi Network Video Recorder Firmware<5.1.12
UI Unifi Network Video Recorder
All of the following
UI Unifi Network Video Recorder Pro Firmware<5.1.12
UI Unifi Network Video Recorder Pro
All of the following
UI Unifi Network Video Recorder Instant Firmware<5.1.12
UI Unifi Network Video Recorder Instant
All of the following
UI Enterprise Network Video Recorder Firmware<5.1.12
UI Enterprise Network Video Recorder
All of the following
UI Unifi Cloud Gateway Ultra Firmware<5.1.12
UI Unifi Cloud Gateway Ultra
All of the following
UI Unifi Cloud Gateway Max Firmware<5.1.12
UI Unifi Cloud Gateway Max
All of the following
UI Unifi Cloud Gateway Fiber Firmware<5.1.12
UI Unifi Cloud Gateway Fiber
All of the following
UI Unifi Dream Router 5g Max Firmware<5.1.12
UI Unifi Dream Router 5g Max
All of the following
UI Enterprise Network Video Recorder Core Firmware<5.1.12
UI Enterprise Network Video Recorder Core
All of the following
UI Unifi Cloud Key Plus Firmware<5.1.12
UI Unifi Cloud Key Plus
All of the following
UI Unifi Cloudkey Firmware<5.1.12
UI Unifi Cloudkey
All of the following
UI Unifi Cloudkey Enterprise Firmware<5.1.12
UI Unifi Cloudkey Enterprise
All of the following
UI Unifi Network Video Recorder G2 Firmware<5.1.12
UI Unifi Network Video Recorder G2
All of the following
UI Unifi Network Video Recorder G2 Pro Firmware<5.1.12
UI Unifi Network Video Recorder G2 Pro
All of the following
UI Unifi Dream Machine Beast Firmware<5.1.11
UI Unifi Dream Machine Beast
All of the following
UI Unas 2 Firmware<5.1.10
UI Unas 2
All of the following
UI Unas 4 Firmware<5.1.10
UI Unas 4
All of the following
UI Unas Pro Firmware<5.1.10
UI Unas Pro
All of the following
UI Unas Pro 4 Firmware<5.1.10
UI Unas Pro 4
All of the following
UI Unas Pro 8 Firmware<5.1.10
UI Unas Pro 8
Event History
May 22, 2026
CVE Published
via MITRE·12:43 AM
Data Sourced
via MITRE·12:43 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·12:00 PM
News Published
via BleepingComputer·12:03 PM
Jun 8, 2026
News Published
via BleepingComputer·03:51 PM
Jun 23, 2026
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-34908?
CVE-2026-34908 has a severity rating of critical, with a score of 10.
2
How do I fix CVE-2026-34908?
To mitigate CVE-2026-34908, ensure all UniFi OS devices are updated to the latest firmware version provided by Ubiquiti.
3
What type of vulnerability is CVE-2026-34908?
CVE-2026-34908 is classified as an Improper Access Control vulnerability.
4
What can attackers do with CVE-2026-34908?
Attackers exploiting CVE-2026-34908 can make unauthorized changes to the UniFi OS system.
5
Who is affected by CVE-2026-34908?
CVE-2026-34908 affects all devices running the Ubiquiti UniFi OS.