Ui Unifi Dream Machine Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ui Unifi Dream Machine Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2026-34908 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make…
• CVE-2026-34909 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the…
• CVE-2026-34910 — CVSS 10.0 (critical) — actively exploited: A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute…
• CVE-2023-24104 — CVSS 9.8 (critical): Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.
• CVE-2026-34911 — CVSS 7.7 (high): A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to…