CVE-2026-34909: CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV)

CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV), EPSS 2.3%. A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.