CVE-2026-34908: CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV)

CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV), EPSS 2.5%. A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.