CISA Adds CVE-2026-34910 to KEV List for Ubiquiti UniFi OS

## Overview CISA added CVE-2026-34910 to its Known Exploited Vulnerabilities (KEV) list on June 23, 2026. This move signals a federal deadline for organizations to address the vulnerability. The flaw exists in Ubiquiti's UniFi OS and allows for command injection due to improper input validation. ## Technical Details The vulnerability arises from insufficient validation of user input in UniFi OS devices. A malicious actor with network access can exploit this flaw to execute arbitrary commands on the affected system. The CVSS score of 10.0 indicates a critical severity level, emphasizing the potential impact of this vulnerability. ## Impact Successful exploitation of CVE-2026-34910 can lead to unauthorized command execution on UniFi OS devices. This could allow attackers to manipulate system functions, access sensitive data, or disrupt operations. Given the critical nature of the vulnerability, organizations using affected devices are at high risk if they do not act quickly. ## Mitigation Ubiquiti has released patches to address this vulnerability. Organizations should prioritize applying these updates to all affected UniFi OS devices. Regularly reviewing security configurations and monitoring network traffic for unusual activity can further mitigate risks associated with this vulnerability. Immediate action is essential to protect against potential exploitation.