Live › vulnerability › CVE-2026-116836
Go to dashboardairMAX M wireless devices contain a stored cross-site scripting flaw in their web interface. An attacker on the adjacent network can use it under certain conditions to escalate privileges on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 01:34 UTC. All times on this page are UTC.
Operators of Ubiquiti airMAX M devices on a network where an attacker could reach them. The sources do not name affected firmware versions or the specific conditions required. unknown
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-116836")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.