MEIFP – Most Exploited Internet-Facing Products

Ubiquiti Inc

Products: EFG · ENVR · ENVR-Core · Express · Express 7 · UCG-Fiber · UCG-Industrial · UCG-Max · UCG-Ultra · UCK · UCK-Enterprise · UCKP · UDM · UDM-Beast · UDM-Pro · UDM-Pro-Max · UDM-SE · UDR · UDR-5G · UDR7

121.7

Score

CVEs

Active

PoC

KEV

#18

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-34908	2026-05-22	10.0v3.1	ACTIVE	Low	None	YES	40.6	EFGENVRENVR-CoreExpress 7UCG-FiberUCG-IndustrialUCG-MaxUCG-UltraUCKUCK-Enterprise	A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.
CVE-2026-34909	2026-05-22	10.0v3.1	ACTIVE	Low	None	YES	40.6	EFGENVRENVR-CoreExpressExpress 7UCG-FiberUCG-IndustrialUCG-MaxUCG-UltraUCK	A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
CVE-2026-34910	2026-05-22	10.0v3.1	ACTIVE	Low	None	YES	40.6	EFGENVRENVR-CoreExpress 7UCG-FiberUCG-IndustrialUCG-MaxUCG-UltraUCKUCK-Enterprise	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3