CRITICAL
CVE-2026-34909
CVSS
10
KEV
Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Summary dbcve.org
Path traversal vulnerability in UniFi OS allows an attacker with network access to escape intended directories and access sensitive files on the underlying Linux filesystem, potentially exposing credentials or system data.
Mitigation
Apply vendor-provided security patches for UniFi OS devices immediately; restrict network access to management interfaces and implement monitoring for unauthorized file access attempts.
Weakness (CWE)
CWE-22
Path Traversal
EPSS Score
65.04%
Probability of exploitation in next 30 days
99.2th percentile
References
https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b
Patch, Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34909
US Government Resource
https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
Exploit, Third Party Advisory
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.