CISA warns of max severity Ubiquiti flaws exploited in attacks
Source Bleeping Computer
Mentioned vulnerabilities
Fixed in 2.2.0.0 : update affected systems when convenient.
Data as of 26 Jun 2026, 16:56 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 2.2.0.0
What to do
AI-suggested
Security updates addressing all identified vulnerabilities have been released by Ubiquiti (May 2026) and Lantronix (firmware version 2.2.0.0R1). System administrators should apply these patches immediately. Federal agencies are required by CISA's BOD 26-04 directive to apply available updates or vendor-recommended mitigations within three days. Additionally, Bishop Fox has provided a free detection script to identify vulnerable UniFi OS instances. No vendor advisory states that no action is required; therefore, prompt patching is the primary mitigation.
Description
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. [...]