Overview
- CISA added four vulnerabilities to its Known Exploited Vulnerabilities catalog and directed federal agencies to apply fixes within three days under binding directives, a step the agency took on Wednesday.
- The entries cover one Lantronix EDS5000 command‑injection (CVE-2025-67038) and three Ubiquiti UniFi OS flaws (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910) that include two CVSS 10.0 ratings for access control bypass and input validation leading to command injection.
- User reports and independent research show the Ubiquiti bugs were exploited in the wild to create rogue admin accounts and that BishopFox validated an unauthenticated gateway bypass that can chain into remote code execution.
- Vendors have released patches—Ubiquiti issued UniFi OS Server 5.0.8 in May and Lantronix published a firmware update—so administrators are advised to patch immediately and check for unauthorized accounts or signs of lateral movement.
- Because UniFi OS manages network infrastructure, successful compromises can let attackers move across enterprise systems and disrupt operations, so organizations should prioritize discovery, patching, and monitoring for automated reconnaissance or added admin users.