VulnSocial

CVE-2026-116837

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-27: 210-27
Referenced assets2 URLs
Full discourse2 posts
  • CERT-PY@CERTpy

    ⚠️ Vulnerabilidades en productos Ubiquiti ❗ CVE-2026-116838 ❗ CVE-2026-116837 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ubiquiti-6/ https://t.co/6OlvEWfpiF

    030921.7K
    6.7K followersView on X
  • Venkata Satish Guttula 🛰️@snakeyesV1

    Ubiquiti’s Oct 26 security bulletin discloses CVE-2026-116837: an attacker on an adjacent network can execute code on affected airMAX M, LTU and Solar devices without credentials or user interaction. Check you are on airMAX M 6.3.26, LTU PTMP 2.4.2, LTU PTP 1.5.7 or SolarPoint/SolarSwitch 2.0.3, or later. These are existing firmware fixes, not new releases today. The bulletin also covers three airMAX M flaws. https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3

    0000075
    3.3K followersView on X

Explore more

Back to dashboard