HIGHVulnerability
Verified
Global

CISA KEV: Ubiquiti UniFi OS — Ubiquiti UniFi OS Improper Access Control Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system.

Analysis

Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to the network to make unauthorized changes to the system. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-23. Remediation due: 2026-06-26.

Indicators of Compromise (1)

CVE (1)
CVE-2026-34908
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 23, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

Canadian fintech Float raises C$85m

Canadian business finance platform Float Financial has raised C$85 million (US$60 million) in a Series C funding round led by Inovia Capital with participation from Goldman Sachs.

Finextra
MEDIUMVulnerability

YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)

YARA-X&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s 1.18.0 release brings 3 improvements and 2 bugfixes.

SANS ISC
CRITICALVulnerability

NVD CRITICAL: CVE-2026-58053 — Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow...

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with

CVE-2026-58053
NIST NVD