Ubiquiti security advisories, October 2026

Every Ubiquiti security advisory published in October 2026, from Ubiquiti Security Advisory Bulletins (Ubiquiti CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 13
Critical: 0
High: 8
In CISA KEV: 0
CVEs: 13

Ubiquiti advisories published in October 2026

Oct 29, 2026
High [CVE-2026-119250] Ubiquiti: malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device
High7.8
Oct 29, 2026
High [CVE-2026-119249] Ubiquiti: malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device
High7.5
Oct 29, 2026
Medium [CVE-2026-119251] Ubiquiti: malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device
Medium6.7
Oct 27, 2026
High [CVE-2026-116839] malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device
High7.1
Oct 27, 2026
High [CVE-2026-116838] malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device
High8.8
Oct 27, 2026
High [CVE-2026-116837] malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device
High8.8
Oct 27, 2026
High [CVE-2026-116836] malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device
High8.8
Oct 14, 2026
High [CVE-2026-110459] malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, and execute a Denial of Service (DoS) attack on the device
High8.6
Oct 14, 2026
High [CVE-2026-110455] malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Command Injection on the device
High8.1
Oct 14, 2026
Medium [CVE-2026-110456] malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device
Medium5.3
Oct 14, 2026
Medium [CVE-2026-110454] malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device
Medium5.3
Oct 14, 2026
Low [CVE-2026-110458] malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on the device
Low3.7
Oct 14, 2026
Low [CVE-2026-110457] malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about files on the device
Low3.7

Get an email when Ubiquiti publishes the next one.

See Ubiquiti's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Ubiquiti

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.