{"id":30025,"date":"2026-06-29T11:00:21","date_gmt":"2026-06-29T09:00:21","guid":{"rendered":"https:\/\/perseus.de\/critical-vulnerabilities-in-unifi-os-are-already-being-actively-exploited\/"},"modified":"2026-08-10T10:29:05","modified_gmt":"2026-08-10T08:29:05","slug":"critical-vulnerabilities-in-unifi-os-are-already-being-actively-exploited","status":"publish","type":"post","link":"https:\/\/perseus.de\/en\/critical-vulnerabilities-in-unifi-os-are-already-being-actively-exploited\/","title":{"rendered":"Critical vulnerabilities in UniFi OS are already being actively exploited"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"In\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
29.06.2026<\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Critical vulnerabilities in UniFi OS are already being actively exploited\n\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>\n

Network and security components continue to be the focus of professional threat actors. Currently, security researchers, the manufacturer Ubiquiti and the US cybersecurity agency CISA warn of three critical vulnerabilities in UniFi OS that are already being actively exploited. Companies using UniFi devices should install the security updates provided in a timely manner and check their systems for signs of compromise. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What happened?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

UniFi OS is the central operating system and management platform of many Ubiquiti devices. Among other things, firewalls, routers, gateways, Wi-Fi networks, switches and video surveillance systems are centrally managed and configured. Since UniFi OS can be used to administer the entire network infrastructure, the platform is a particularly attractive point of attack for cybercriminals. <\/span><\/p>\n

Three critical vulnerabilities (CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910) have been discovered in UniFi OS with a maximum CVSS score of 10.0. It is particularly critical that these vulnerabilities can be combined with each other and thus enable a complete takeover of affected systems. <\/span><\/p>\n

The U.S. cybersecurity agency CISA has already included the vulnerabilities in its catalog of actively exploited vulnerabilities. In addition, a functional sample exploit has been published by security researchers, which significantly increases the risk of further attacks. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How does the attack work? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The attack targets the UniFi OS management interface. By exploiting these three vulnerabilities in combination, attackers can bypass several security mechanisms in succession. First, they gain access to internal system functions without having to authenticate using valid credentials (authentication bypass). They can then access confidential system files (path traversal) and, finally, execute arbitrary commands on the device (command injection<\/strong>). <\/p>

As a result, the attackers gain full control over the management infrastructure of the affected UniFi system \u2013 with the highest system privileges (remote root compromise<\/strong>). This means that they can take complete control of the system without having to log in first. They can then manage the device as an administrator, create new user accounts, change configurations or manipulate security features. <\/p>

Attacks that have already been observed show that attackers create new administrator accounts \u2013 for example, with the name \u2018John Sim<\/strong>\u2019 \u2013 without being detected. Such accounts enable them to remain on the system indefinitely and prepare further attacks on internal systems. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What is affected? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The following systems with UniFi OS are affected, among others:<\/span><\/p>\n

    \n
  • UniFi Dream Machine (UDM)<\/span><\/li>\n
  • UDM Pro<\/span><\/li>\n
  • UDM SE<\/span><\/li>\n
  • UDM Pro Max<\/span><\/li>\n
  • UNVR G2 and UNVR Pro<\/span><\/li>\n
  • UniFi OS Server<\/span><\/li>\n
  • more UniFi devices with UniFi OS<\/span><\/li>\n<\/ul>\n

    <\/p>\n

    Small and medium-sized companies in particular often use UniFi products as a central network and security infrastructure.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Why is this particularly critical? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    UniFi gateways and controllers often manage an organization’s entire network infrastructure. If such a system is compromised, attackers can create new user accounts, change network configurations, override security mechanisms or attack other systems within the company network, among other things. <\/span><\/p>\n

    Since the vulnerabilities are already being actively exploited and publicly available attack tools exist, there is a particularly high risk for unpatched systems. The combination of ease of exploitability, lack of exploit barriers, and already confirmed active exploitation makes these vulnerabilities particularly attractive for automated attacks, botnets, and large-scale campaigns. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
    \n\t\t\t\t\t
    \n\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    How can I protect myself? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    We recommend that affected companies implement the following measures in a timely manner:<\/span><\/p>\n

      \n
    • Update UniFi OS:<\/b> Install at least <\/span>version 5.1.12<\/b> or <\/span> at least version <\/span>5.0.8<\/b> for UniFi OS Server<\/b>.<\/span><\/li>\n
    • Check systems:<\/b> Check for unknown administrator accounts (e.g. <\/span>“John Sim”)<\/b> or unexpected configuration changes. Remove suspicious accounts and reset affected credentials.<\/span><\/li>\n
    • Secure and restrict management access:<\/b> Make sure that the management interface of your UniFi devices is not directly accessible from the Internet. Access should only be via the internal network or a secure VPN. Strictly limit access to management systems to dedicated admin networks or zero trust access.<\/span><\/li>\n
    • Enable Logging & Detection:<\/b> Enable and analyze HTTP, system, and audit logs, especially for unusual API accesses, directory traversal patterns, or unexpected shell commands.<\/span><\/li>\n
    • Reduce external attack surface:<\/b> Regularly check that UniFi management interfaces are publicly accessible and remove unnecessary exposure.<\/span><\/li>\n<\/ul>\n

      <\/p>\n

      Companies using UniFi OS should update their systems at short notice and check for signs of compromise as a precautionary measure. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Do you want to stay informed about current threats and security vulnerabilities?<\/i><\/p>\n

      Subscribe to our newsletter and receive important warnings, recommendations for action and assessments of current cyber risks directly in your inbox.<\/i><\/p>\n

      <\/p>\n

      Sources & Further Information<\/b><\/p>\n

        \n
      • Ubiquiti Security Bulletin 064<\/span><\/i><\/li>\n<\/ul>\n
          \n
        • CISA \u2013 Known Exploited Vulnerabilities (KEV)<\/span><\/i><\/li>\n<\/ul>\n
            \n
          • heise Security \u2013 Active Attacks on UniFi OS<\/span><\/i><\/li>\n<\/ul>\n
              \n
            • Bishop Fox \u2013 Technical Analysis and Proof of Concept<\/span><\/i><\/li>\n<\/ul>\n

              <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

              \n\t\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t
              \n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

              Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts.
              \nBut cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[22],"tags":[],"class_list":["post-30025","post","type-post","status-publish","format-standard","hentry","category-gefahrenwarnung"],"acf":[],"yoast_head":"\nCritical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Critical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies\" \/>\n<meta property=\"og:description\" content=\"Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts. But cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/\" \/>\n<meta property=\"og:site_name\" content=\"Perseus Technologies\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-29T09:00:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-10T08:29:05+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anastasia Pamoukis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anastasia Pamoukis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/\"},\"author\":{\"name\":\"Anastasia Pamoukis\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\"},\"headline\":\"Critical vulnerabilities in UniFi OS are already being actively exploited\",\"datePublished\":\"2026-06-29T09:00:21+00:00\",\"dateModified\":\"2026-08-10T08:29:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/\"},\"wordCount\":761,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"articleSection\":[\"Gefahrenwarnung\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/\",\"name\":\"Critical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"datePublished\":\"2026-06-29T09:00:21+00:00\",\"dateModified\":\"2026-08-10T08:29:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#primaryimage\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_EN-1024x256.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/perseus.de\\\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/perseus.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Critical vulnerabilities in UniFi OS are already being actively exploited\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"name\":\"perseus-web.de\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/perseus.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\",\"name\":\"perseus-web.de\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"width\":536,\"height\":172,\"caption\":\"perseus-web.de\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\",\"name\":\"Anastasia Pamoukis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"caption\":\"Anastasia Pamoukis\"},\"sameAs\":[\"https:\\\/\\\/perseus.de\"],\"url\":\"https:\\\/\\\/perseus.de\\\/en\\\/author\\\/anastasia-pamoukis\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Critical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/","og_locale":"en_US","og_type":"article","og_title":"Critical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies","og_description":"Multi-factor authentication (MFA) has been considered one of the most effective protection measures against account takeovers for years. Many organizations rely on an additional security feature \u2014 such as an authenticator app or SMS \u2014 to prevent threat actors from accessing corporate accounts. But cybercriminals are constantly evolving their methods. With Kali365, security researchers and authorities are currently observing an attack method that shows that even proven protection mechanisms are not always sufficient. Companies that use Microsoft 365 in particular should follow developments closely and review their security measures.","og_url":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/","og_site_name":"Perseus Technologies","article_published_time":"2026-06-29T09:00:21+00:00","article_modified_time":"2026-08-10T08:29:05+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN.png","type":"image\/png"}],"author":"Anastasia Pamoukis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anastasia Pamoukis","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#article","isPartOf":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/"},"author":{"name":"Anastasia Pamoukis","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b"},"headline":"Critical vulnerabilities in UniFi OS are already being actively exploited","datePublished":"2026-06-29T09:00:21+00:00","dateModified":"2026-08-10T08:29:05+00:00","mainEntityOfPage":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/"},"wordCount":761,"commentCount":0,"publisher":{"@id":"https:\/\/perseus.de\/#organization"},"image":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","articleSection":["Gefahrenwarnung"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/","url":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/","name":"Critical vulnerabilities in UniFi OS are already being actively exploited - Perseus Technologies","isPartOf":{"@id":"https:\/\/perseus.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#primaryimage"},"image":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","datePublished":"2026-06-29T09:00:21+00:00","dateModified":"2026-08-10T08:29:05+00:00","breadcrumb":{"@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#primaryimage","url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_EN-1024x256.png"},{"@type":"BreadcrumbList","@id":"https:\/\/perseus.de\/kritische-sicherheitsluecken-in-unifi-os-werden-bereits-aktiv-ausgenutzt\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/perseus.de\/"},{"@type":"ListItem","position":2,"name":"Critical vulnerabilities in UniFi OS are already being actively exploited"}]},{"@type":"WebSite","@id":"https:\/\/perseus.de\/#website","url":"https:\/\/perseus.de\/","name":"perseus-web.de","description":"","publisher":{"@id":"https:\/\/perseus.de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/perseus.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/perseus.de\/#organization","name":"perseus-web.de","url":"https:\/\/perseus.de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","width":536,"height":172,"caption":"perseus-web.de"},"image":{"@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b","name":"Anastasia Pamoukis","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","caption":"Anastasia Pamoukis"},"sameAs":["https:\/\/perseus.de"],"url":"https:\/\/perseus.de\/en\/author\/anastasia-pamoukis\/"}]}},"_links":{"self":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/comments?post=30025"}],"version-history":[{"count":4,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30025\/revisions"}],"predecessor-version":[{"id":30072,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/posts\/30025\/revisions\/30072"}],"wp:attachment":[{"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/media?parent=30025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/categories?post=30025"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/perseus.de\/en\/wp-json\/wp\/v2\/tags?post=30025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}