unifi_dream_machine_firmware vulnerabilities

CVEs whose affected-version data names the unifi_dream_machine_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-34910Critical· 10.0CISA KEVPoC

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

▾ Hadalui · unifi_os_serverEPSS 90%via NVD

unifi_dream_machine_firmware vulnerabilities (CVEs) · VulnSea