CISA warns of max severity Ubiquiti flaws exploited in attacks

CISA warns of active exploitation of several critical Ubiquiti UniFi OS vulnerabilities (CVE-2026-34908/34909/34910) enabling access control bypass, path traversal, and command injection leading to potential full system compromise; a separate critical Lantronix EDS5000 root-level command injection (CVE-2025-67038) is also highlighted. Vendors have released patches and detection scripts, and administrators are urged to apply updates or mitigations immediately.