Improper access control in Ubiquiti Networks products - CVE-2026-34908

Vulnerability identifier: #VU135470

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-34908

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A remote attacker can bypass implemented security restrictions and make unauthorized changes to the system.

UNVR-G2
UDR-5G
UCG-Fiber
UCG-Industrial
UCG-Max
ENVR-Core
UCG-Ultra
UCKP
ENVR
UCK
UNVR-Instant
UCK-Enterprise
UNVR-Pro
UniFi OS Server
UNVR
Express 7
EFG
UDM
UNAS-Pro-8
UDM-Pro
UNAS-Pro-4
UDM-SE
UNAS-Pro
UDM-Pro-Max
UNAS-4
UNAS-2
UDW
UDM-Beast
UDR
UNVR-G2-Pro
UDR7

Install updates from vendor's website.

UNVR-G2 - update to 5.1.12
UDR-5G - update to 5.1.12
UCG-Fiber - update to 5.1.12
UCG-Industrial - update to 5.1.12
UCG-Max - update to 5.1.12
ENVR-Core - update to 5.1.12
UCG-Ultra - update to 5.1.12
UCKP - update to 5.1.12
ENVR - update to 5.1.12
UCK - update to 5.1.12
UNVR-Instant - update to 5.1.12
UCK-Enterprise - update to 5.1.12
UNVR-Pro - update to 5.1.12
UniFi OS Server - update to 5.0.8
UNVR - update to 5.1.12
Express 7 - update to 5.1.12
EFG - update to 5.1.12
UDM - update to 5.1.12
UNAS-Pro-8 - update to 5.1.10
UDM-Pro - update to 5.1.12
UNAS-Pro-4 - update to 5.1.10
UDM-SE - update to 5.1.12
UNAS-Pro - update to 5.1.10
UDM-Pro-Max - update to 5.1.12
UNAS-4 - update to 5.1.10
UNAS-2 - update to 5.1.10
UDW - update to 5.1.12
UDM-Beast - update to 5.1.11
UDR - update to 5.1.12
UNVR-G2-Pro - update to 5.1.12
UDR7 - update to 5.1.12

• https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34908

• Multiple vulnerabilities in Ubiquiti UniFi OS devices