Patchfirst: Ubiquiti vulnerabilitieshttps://patchfirst.co/vendor/ubiquiti/New and newly exploited Ubiquiti CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2026-34910: Ubiquiti UniFi OS Improper Input Validation Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-34910/CVE-2026-34910#kevTue, 23 Jun 2026 00:00:00 GMTUbiquiti · UniFi OS. In CISA KEV since 2026-06-23. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 75.0 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2026-34908: Ubiquiti UniFi OS Improper Access Control Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-34908/CVE-2026-34908#kevTue, 23 Jun 2026 00:00:00 GMTUbiquiti · UniFi OS. In CISA KEV since 2026-06-23. ENISA EUVD lists it as exploited. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098 Account Manipulation. Priority 75.0 of 100.kevpublic-exploitT1190T1098[KEV] CVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-34909/CVE-2026-34909#kevTue, 23 Jun 2026 00:00:00 GMTUbiquiti · UniFi OS. In CISA KEV since 2026-06-23. ENISA EUVD lists it as exploited. EPSS 68.0% (higher than 99.32% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 74.9 of 100.kevpublic-exploitT1190T1005CVE-2025-52665: A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access…https://patchfirst.co/cve/CVE-2025-52665/CVE-2025-52665Thu, 30 Oct 2025 00:00:00 GMTUbiquiti Inc · UniFi Access Application. Not in CISA KEV. EPSS 41.1% (higher than 98.7% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 71.7 of 100.public-exploitCVE-2023-28365: A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating…https://patchfirst.co/cve/CVE-2023-28365/CVE-2023-28365Fri, 30 Jun 2023 00:00:00 GMTUbiquiti Inc. · UniFi Network application. Not in CISA KEV. EPSS 0.9% (higher than 59.1% of CVEs). Priority 48.6 of 100.[KEV] CVE-2010-5330: Ubiquiti AirOS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2010-5330/CVE-2010-5330#kevFri, 15 Apr 2022 00:00:00 GMTUbiquiti · AirOS. In CISA KEV since 2022-04-15. ENISA EUVD lists it as exploited. EPSS 40.2% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.6 of 100.kevpublic-exploitT1190T1059