CVE-2026-34910 CISA KEV · Actively exploited
Improper input validation in UI Unifi OS Server
CVSS score
10.0
EPSS probability
%45.8
Risk score
9.2
Published
5 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: UniFi OS Server - Command Injection
Makefile Go / Python
NVD reference
https://www.pwndefend.com/2026/06/09/cve-2026-34910-exploitation-itw-building-a-botnet-mirai/
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2026-34908 Actively exploitedImproper access control in UI Unifi OS Server
Patch verified Public Exploits:2EPSS %15
7.2
CVE-2023-2375Command injection in UI Er X Firmware
Patch status unknown Public Exploits:1EPSS %9
7.2
CVE-2023-2378Command injection in UI Er X Firmware
Patch status unknown Public Exploits:1EPSS %8
7.2
CVE-2023-2377Command injection in UI Er X Firmware
Patch status unknown Public Exploits:1EPSS %8
7.2
CVE-2023-2376Command injection in UI Er X Firmware
Patch status unknown Public Exploits:1EPSS %8
7.2
CVE-2023-2373Command injection in UI Edgemax Edgerouter Firmware
Patch status unknown Public Exploits:1EPSS %8
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-34910"