Skip to content
Threat Feed
Subscribe

Product

UniFi OS

3 briefs RSS
high threat

WordPress Exploitation and Data Exfiltration by Red Heron Affiliate

An adversary linked to the Red Heron group is exploiting multiple vulnerabilities in WordPress, Ubiquiti, and ZyXEL devices to conduct reconnaissance, gain persistence, and exfiltrate sensitive records, including over 18,000 government documents.

WordPress +2 Red Heron data-theft exfiltration vulnerability-exploitation
1r 2t 5c 3i
high advisory

Critical Vulnerabilities in Ubiquiti UniFi Product Suite

Multiple high-severity vulnerabilities, including CVE-2026-77533 and CVE-2026-77537, affect Ubiquiti UniFi products, potentially allowing for system compromise.

UniFi Protect +2 vulnerability network-security
2c
critical advisory

Multiple Critical Vulnerabilities in Ubiquiti UniFi OS

Ubiquiti has addressed multiple critical vulnerabilities including CVE-2026-34908, CVE-2026-34909, CVE-2026-34910, and CVE-2026-33000 in UniFi OS, which could allow remote attackers to make unauthorized system changes, access sensitive files, disclose information, or execute arbitrary commands on vulnerable systems.

PoC UniFi OS +6 vulnerability unifi command_injection path_traversal improper_access_control
2r 1t 5c 1i updated