Ui Unifi Cloud Gateway Max Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ui Unifi Cloud Gateway Max Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-34908 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make…
• CVE-2026-34909 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the…
• CVE-2026-34910 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute…
• CVE-2026-34911 — CVSS 7.7 (high): A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to…