Live › vulnerability › CVE-2026-116837
Go to dashboardA heap-based buffer overflow in Ubiquiti airMAX M, LTU, SolarPoint and SolarSwitch devices can be triggered by an attacker on the adjacent network. Successful exploitation lets the attacker execute arbitrary code on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 01:34 UTC. All times on this page are UTC.
Ubiquiti airMAX M, LTU, SolarPoint and SolarSwitch devices are exposed to an attacker on the same network segment, with no login needed (CVSS vector AV:A/PR:N/UI:N). Look at radios and switches whose management or wireless network is shared with untrusted clients. Devices reachable only from a trusted, isolated management network are lower risk. Affected firmware versions are not yet confirmed from a Ubiquiti advisory.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-116837")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.