Cross-Site Request Forgery Vulnerability in airMAX M Devices by Ubiquiti

CVE-2026-116838

What is CVE-2026-116838?

A CSRF vulnerability in Ubiquiti's airMAX M devices may allow a malicious actor to exploit the authentication of a user. By directing an authenticated user to a specially crafted malicious page, an attacker could execute command injection on the device, potentially leading to unauthorized actions and compromise of system integrity. Users are encouraged to review security updates and employ protective measures to mitigate the risks of this vulnerability.

References