Cross-Site Request Forgery Vulnerability in airMAX M Devices by Ubiquiti
CVE-2026-116839

7.1HIGH

Key Information:

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-116839?

A CSRF vulnerability in airMAX M devices allows an attacker to exploit a trusted user's authentication, redirecting them to a malicious page. This exploitation could lead to unauthorized changes and facilitate Denial of Service (DoS) attacks, compromising the device's functionality. Users should remain vigilant about potential phishing attempts to mitigate such risks.

Affected Version(s)

airMAX M 0 < 6.3.26

References

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.