CVE-2026-116838 - Vulnerability Details - OpenCVE

A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ubiquiti	Airmax M

No data.

No data.

References

Link	Providers
https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3

History

Tue, 03 Nov 2026 21:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 27 Oct 2026 09:00:00 +0000

Type	Values Removed	Values Added
Title	Cross‑Site Request Forgery leading to Command Injection on Ubiquiti AirMAX M Devices

Tue, 27 Oct 2026 08:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ubiquiti Ubiquiti airmax M
Vendors & Products		Ubiquiti Ubiquiti airmax M

Tue, 27 Oct 2026 07:45:00 +0000

Type	Values Removed	Values Added
Title		Cross‑Site Request Forgery leading to Command Injection on Ubiquiti AirMAX M Devices

Tue, 27 Oct 2026 04:30:00 +0000

Type	Values Removed	Values Added
Description		A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
Weaknesses		CWE-352
References		https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Ubiquiti

Published: 2026-10-27T00:48:17.932Z

Updated: 2026-11-03T20:24:31.073Z

Reserved: 2026-10-27T00:05:22.960Z

Link: CVE-2026-116838

Vulnrichment

Updated: 2026-11-03T20:24:18.753Z

NVD

Status : Awaiting Analysis

Published: 2026-10-27T01:19:06.973

Modified: 2026-11-03T21:17:02.827

Link: CVE-2026-116838

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-116838", "assignerOrgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "state": "PUBLISHED", "assignerShortName": "Ubiquiti", "dateReserved": "2026-10-27T00:05:22.960Z", "datePublished": "2026-10-27T00:48:17.932Z", "dateUpdated": "2026-11-03T20:24:31.073Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "shortName": "Ubiquiti", "dateUpdated": "2026-10-27T00:48:17.932Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-352", "description": "CWE-352 Cross-Site request forgery (CSRF)", "type": "CWE"}]}], "affected": [{"vendor": "Ubiquiti Inc", "product": "airMAX M", "versions": [{"status": "affected", "version": "0", "lessThan": "6.3.26", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device."}]}], "references": [{"url": "https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-03T20:24:11.837867Z", "id": "CVE-2026-116838", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T20:24:31.073Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-116838", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-03T20:24:11.837867Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-03T20:24:18.753Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Ubiquiti Inc", "product": "airMAX M", "versions": [{"status": "affected", "version": "0", "lessThan": "6.3.26", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3"}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.", "supportingMedia": [{"type": "text/html", "value": "A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site request forgery (CSRF)"}]}], "providerMetadata": {"orgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "shortName": "Ubiquiti", "dateUpdated": "2026-10-27T00:48:17.932Z"}}}, "cveMetadata": {"cveId": "CVE-2026-116838", "state": "PUBLISHED", "dateUpdated": "2026-11-03T20:24:31.073Z", "dateReserved": "2026-10-27T00:05:22.960Z", "assignerOrgId": "fe490ce8-0395-4072-90d8-2707e1bdf984", "datePublished": "2026-10-27T00:48:17.932Z", "assignerShortName": "Ubiquiti"}, "dataVersion": "5.2"}