CVE-2026-21634General(ui / unifi_protect)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A malicious actor with access to the adjacent network could overflow the UniFi Protect Application (Version 6.1.79 and earlier) discovery protocol causing it to restart. Affected Products: UniFi Protect Application (Version 6.1.79 and earlier). Mitigation: Update your UniFi Protect Application to Version 6.2.72 or later.

ui CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://community.ui.com/releases/Security-Advisory-Bulletin-058-058/6922ff20-8cd7-4724-8d8c-676458a2d0f9

Weakness type (CWE)

CWE-119

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

unifi_protect

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
General: 3 classified signals
Disclosure: 1 classified signal
Peaked at 3 mentions on most recent observed day (2026-06-08)
4 total mentions across 2 days

Affected systems

Vendors

Products

unifi_protect

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

General

375.0%

Disclosure

125.0%

Referenced assets1 URL

By indicator

https://www.zerodayinitiative.com/advisories/ZDI-26-128/

Classification over time

Date	Total	Labels

2026-02-25	1	Disclosure1
2026-06-08	3	General3

Full discourse4 posts

TheZDIBugs@TheZDIBugs226d
Disclosure
[ZDI-26-128|CVE-2026-21634] (Pwn2Own) Ubiquiti Networks AI Pro Uncaught Exception Denial-of-Service Vulnerability (CVSS 6.5; Credit: David BERARD from @Synacktiv) https://www.zerodayinitiative.com/advisories/ZDI-26-128/
Post summary
A new Denial-of-Service vulnerability (CVE-2026-21634) in Ubiquiti Networks AI Pro has been disclosed with a CVSS score of 6.5, but no PoC, exploit, or patch details are provided in the text.
01032936
5.3K followersView on X
Dave@RideToFireStar123d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The post enumerates several CVEs with associated severity ratings but provides no further technical, exploit, or mitigation details.
00000116
1.2K followersView on X
Dave@RideToFireStar123d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The tweet enumerates multiple high‑severity CVEs for various UniFi products with CVSS scores, but it contains no evidence of PoC, exploit tools, active exploitation, or remediation.
0000057
1.2K followersView on X
Dave@RideToFireStar123d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The post lists several UniFi-related CVEs with their severity scores, but offers no additional technical details, PoC, exploit code, active exploitation claim, or patch information.
00000110
1.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ui	unifi_protect	-	-	-

Explore more

Back to dashboard ui CVEs unifi_protect vulnerabilities

What researchers are saying

CVE-2026-21634

Dave[verified]@RideToFireStarGeneral

The post enumerates several CVEs with associated severity ratings but provides no further technical, exploit, or mitigation details.

Dave[verified]@RideToFireStarGeneral

The tweet enumerates multiple high‑severity CVEs for various UniFi products with CVSS scores, but it contains no evidence of PoC, exploit tools, active exploitation, or remediation.

Dave[verified]@RideToFireStarGeneral

The post lists several UniFi-related CVEs with their severity scores, but offers no additional technical details, PoC, exploit code, active exploitation claim, or patch information.

TheZDIBugs@TheZDIBugsDisclosure

A new Denial-of-Service vulnerability (CVE-2026-21634) in Ubiquiti Networks AI Pro has been disclosed with a CVSS score of 6.5, but no PoC, exploit, or patch details are provided in the text.