Threat Intelligence / CVE / CVE-2026-34910
CVE-2026-34910
As of 2026-05-23, CVE-2026-34910 is a CVSS 10 (CRITICAL-severity) vulnerability. EPSS exploitation probability 0.1%. Threadlinqs Intelligence tracks 4 threats exploiting it.
Last updated: 2026-05-23
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses (CWE)
CWE-20
Threats tracking this CVE
- CVE-2026-50746: Critical Unauthenticated Command Injection in Ubiquiti UniFi Connect Application (CVSS 10.0) — CRITICAL
- CISA BOD 26-04: Risk-Based Vulnerability Remediation and CISO Reporting Mandate for FCEB Agencies — MEDIUM
- UniFi OS Server Pre-Auth RCE Chain (CVE-2026-34908/34909/34910): x-original-uri Auth-Gateway Bypass + package-update Command Injection — CRITICAL
- Ubiquiti UniFi OS — Three Max-Severity Pre-Auth Vulnerabilities (CVE-2026-34908 / 34909 / 34910) in Security Advisory Bulletin 064 — CRITICAL
References
Full detection coverage & IOCs for threats exploiting CVE-2026-34910 are available via the Threadlinqs MCP server (Purple tier). View plans →
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.