Live › vulnerability › CVE-2026-116839
Go to dashboardairMAX M wireless devices have a cross-site request forgery flaw: a malicious page visited by a logged-in administrator can send requests that change configuration. An attacker can also use it to cause a denial of service on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 01:34 UTC. All times on this page are UTC.
Teams running Ubiquiti airMAX M wireless devices with a logged-in administrator web session. Exposure depends on the user visiting an attacker-controlled page while authenticated; devices managed only through other interfaces or never opened in a browser are less exposed. Exact affected firmware versions are unknown from the sources.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-116839")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.