Stored Cross-Site Scripting Vulnerability in airMAX M Devices by Ubiquiti Networks

CVE-2026-116836

What is CVE-2026-116836?

A vulnerability exists in Ubiquiti Networks' airMAX M devices that allows for stored cross-site scripting (XSS). This issue can be exploited by a malicious actor with access to the adjacent network, enabling them to execute scripts and escalate privileges on the targeted device under specific conditions. This could lead to a significant security breach, making it essential for users to apply necessary patches and updates.

References