{"schema":"threatline.record/2","record":{"id":"CVE-2026-34910","aliases":[],"summary":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","details":"Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to the network to conduct command injection.","categories":["Network & edge"],"product":"UniFi OS","vendor":"Ubiquiti","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UniFi OS Server","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.0.8","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDM","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDM-Pro","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDM-SE","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDM-Pro-Max","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDM-Beast","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.11","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"EFG","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDW","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDR","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDR7","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UDR-5G","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Express 7","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNVR","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNVR-Pro","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNVR-Instant","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNVR-G2","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNVR-G2-Pro","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"ENVR","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"ENVR-Core","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNAS-2","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.10","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNAS-4","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.10","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNAS-Pro","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.10","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNAS-Pro-4","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.10","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UNAS-Pro-8","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.10","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCKP","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCK","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCK-Enterprise","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCG-Ultra","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCG-Max","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCG-Fiber","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"UCG-Industrial","vendor":"Ubiquiti Inc","versions":[{"version":"0","status":"affected","lessThan":"5.1.12","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UniFi OS Server","ecosystem":null},"version":"5.0.8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDM","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDM-Pro","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDM-SE","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDM-Pro-Max","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDM-Beast","ecosystem":null},"version":"5.1.11","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"EFG","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDW","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDR","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDR7","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UDR-5G","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Express 7","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNVR","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNVR-Pro","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNVR-Instant","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNVR-G2","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNVR-G2-Pro","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"ENVR","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"ENVR-Core","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNAS-2","ecosystem":null},"version":"5.1.10","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNAS-4","ecosystem":null},"version":"5.1.10","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNAS-Pro","ecosystem":null},"version":"5.1.10","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNAS-Pro-4","ecosystem":null},"version":"5.1.10","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UNAS-Pro-8","ecosystem":null},"version":"5.1.10","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCKP","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCK","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCK-Enterprise","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCG-Ultra","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCG-Max","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCG-Fiber","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","source_modified_at":"2026-06-24T03:55:52.177Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"UCG-Industrial","ecosystem":null},"version":"5.1.12","basis":"first unaffected version stated in the CVE record"}],"cvss":10,"severity":"Critical","kev":{"listed":true,"date_added":"2026-06-23","due_date":"2026-06-26","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.45768,"percentile":0.98799,"score_date":"2026-10-23"},"published_at":"2026-05-22T00:43:49.096Z","modified_at":"2026-06-24T03:55:52.177Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-34910","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-06-24T03:55:52.177Z"},{"source":"Nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34910.yaml","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-34910","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Nuclei","EPSS"],"references":[{"source":"CVE List","url":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34910","source":"CISA KEV"},{"source":"CVE List","url":"https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-34910","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2026-05-22T00:00:00+00:00"},"exploits":[{"source":"Nuclei","kind":"Scanner template","name":"UniFi OS Server - Command Injection","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34910.yaml"}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-06-24T03:55:52.177Z","content_hash":"90855c17728bc62e93033c0bc3f1ad261fbca7882bac31ac93ea8deba55c37e5"}}