CVE-2026-34909
A Path Traversal flaw in UniFi OS devices lets a network attacker read or modify files on the underlying system, potentially giving them a system account. The vulnerability can be exploited without authentication and is reachable over the network.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
UniFi OS devices such as Dream Machine, Cloud Gateway, Dream Wall, and related firmware for enterprise and industrial gateways. Network administrators and IT staff managing these devices are the typical users.
Real-world impact
An attacker could read sensitive configuration files, alter system files, or gain a privileged account, leading to full control over the device and potentially the network it serves.
Why this severity
The CVSS score of 10 reflects that the flaw is network‑exposed, requires no authentication, and allows complete compromise of confidentiality, integrity, and availability.
What to do about it
- 01Follow the vendor’s instructions to mitigate the vulnerability.
CISA KEV required action
Timeline
- May 22, 2026 · May 22, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jun 23, 2026 · Jun 23, 2026Confirmed exploited (CISA KEV)CISA added it to the Known Exploited Vulnerabilities catalog — attackers are using it in the wild.
- Jun 26, 2026 · Jun 26, 2026CISA remediation deadlineFederal agencies are required to remediate by this date.
- Jul 23, 2026 · 12d agoAdvisory updatedThe NVD record was last revised.
- Jul 23, 2026 · 12d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- community.ui.com/releases/Security-Advisory-…patchvendor advisory
- cisa.gov/known-exploited-vulnerabili…us government resource
- pwndefend.com/2026/06/09/cve-2026-34910-e…exploitthird party advisory