unifi cloud gateway industrial firmware vulnerabilities and fixes

Recent CVEs affecting unifi cloud gateway industrial firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: unificloudgatewayindustrialfirmware.

unifi cloud gateway industrial firmware has 4 tracked vulnerabilities, 3 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 4. Most recent: 2026-05-22. Highest priority: CVE-2026-34908 (score 98/100).

• CVE-2026-34908 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Ubiquiti UniFi OS Improper Access Control Vulnerability
• CVE-2026-34909 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Ubiquiti UniFi OS Path Traversal Vulnerability
• CVE-2026-34910 CRITICAL 10.0 EXPLOITED UPGRADE UPGRADE Ubiquiti UniFi OS Improper Input Validation Vulnerability
• CVE-2026-34911 HIGH 7.7 UPGRADE UPGRADE A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability f

FAQ

How do I fix unifi cloud gateway industrial firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unifi cloud gateway industrial firmware being exploited right now?

Yes: 3 unifi cloud gateway industrial firmware CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which unifi cloud gateway industrial firmware CVE should I patch first?

CVE-2026-34908 currently ranks highest (98/100): Ubiquiti UniFi OS Improper Access Control Vulnerability.

RSS feed for unifi cloud gateway industrial firmware · ← Back to latest CVEs