UniFi OS command injection exploited in the wild, Exchange SSRF and ManageEngine SSO bypass waiting in the wings
Two actively exploited command injection bugs (UniFi OS and Lantronix EDS5000) plus a CVSS 8.8 Exchange SSRF and a CVSS 9.0 ManageEngine session prediction flaw that let unauthenticated attackers take over admin accounts.
Two command injection bugs are being exploited right now, and neither one requires much skill to pull off. CVE-2026-34910 lets network-adjacent attackers run OS commands on UniFi gateways, switches, and access points. If you manage UniFi gear, stop reading and go patch. We've also got a no-auth root shell on Lantronix serial servers, an Exchange SSRF that smells like trouble, and a ManageEngine SSO bypass at CVSS 9.0.
Today's CVEs
Sorted by urgencyCVE-2026-34910
CISA KEVAn attacker on your network can inject OS commands into UniFi OS devices due to poor input validation. This is already exploited in the wild, and the EPSS score (0.34, 98th percentile) confirms high exploit probability. If you run any UniFi gateways, switches, or access points on UniFi OS, treat this as a hair-on-fire issue.
- Affected estate
- Anyone running Ubiquiti UniFi OS devices: gateways, switches, APs, or Dream Machines
- How to check
- In the UniFi Network console, go to Devices and check the firmware version column. You can also SSH into a device and run 'ubnt-device-info firmware'.
- Included because
- exploited in the wild; network-accessible; common product; high EPSS percentile
- Action
- Apply the latest UniFi OS firmware immediately via the console or manual upgrade.
- Why it matters
- Attackers on your LAN can get full command execution on your network infrastructure, which means complete network compromise.
Evidence trail
- NVD: View source
CVE-2025-67038
CISA KEVAttackers can inject OS commands through the login username field on Lantronix EDS5000 serial device servers, and those commands run as root. This is exploited in the wild. No authentication is needed: just hit the login page and type a payload into the username box.
- Affected estate
- Anyone running Lantronix EDS5000 serial-to-Ethernet device servers, especially those exposed to untrusted networks
- How to check
- Log into the EDS5000 web interface and check the firmware version on the System Status page, or query the device via SNMP.
- Included because
- unauthenticated; exploited in the wild; root-level command injection
- Action
- Update firmware to the patched version and block management interface access from untrusted networks.
- Why it matters
- Unauthenticated root-level command injection on a device that often bridges serial equipment to your network gives attackers a pivot point into OT or sensitive infrastructure.
Evidence trail
- NVD: View source
CVE-2026-45504
MSRCAn authenticated attacker can use a server-side request forgery (SSRF) bug in on-prem Exchange Server to escalate privileges over the network. CVSS 8.8. Not yet exploited in the wild, but Exchange SSRF bugs have a history of being chained into full compromise quickly. The attacker needs a valid mailbox account to start, but from there can escalate.
- Affected estate
- Anyone running on-prem Exchange Server 2016 CU23, 2019 CU14 or CU15, or Exchange Server Subscription Edition RTM
- How to check
- Run 'Get-ExchangeServer | Format-List Name,AdminDisplayVersion' in Exchange Management Shell and compare against the patched build numbers in the Microsoft advisory.
- Included because
- authenticated but low barrier; CVSS 8.8; internet-facing; common product; Exchange SSRF bugs historically chained
- Action
- Install the latest Exchange Server security update and verify the build number matches the patched version.
- Why it matters
- SSRF in Exchange is a proven path to privilege escalation and lateral movement. Any compromised mailbox account becomes a launchpad for domain-level attacks.
- Source
- Microsoft Security Response Center
Evidence trail
- NVD: View source
CVE-2026-11374
NVDSSO session tickets in several ManageEngine products (ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, ADAudit Plus) are predictable. An unauthenticated attacker can guess valid tickets and take over any account, including admin accounts. CVSS 9.0. Not yet exploited in the wild, but the unauthenticated, network-accessible nature of this makes it a prime target.
- Affected estate
- Anyone running ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus with SSO enabled
- How to check
- Log into each product's admin console and check the build number under Admin > Product Settings or About. Compare against the fixed build numbers in the ManageEngine advisory.
- Included because
- unauthenticated; CVSS 9.0; account takeover; AD-adjacent product
- Action
- Upgrade to the patched builds, then force-invalidate all active SSO sessions and review admin account activity for signs of unauthorized access.
- Why it matters
- These products manage Active Directory self-service and auditing. Account takeover here means an attacker can reset AD passwords, disable auditing, or pivot into your domain.
- Source
- ManageEngine advisory
Evidence trail
- NVD: View source
CVE-2026-53755
NVDCrawl4AI's Docker API server (unauthenticated by default) only validates the crawl target URL for SSRF, not the proxy address. An attacker can point the proxy at internal IPs or cloud metadata endpoints (like 169.254.169.254) and route the browser through them, reaching services that should never be exposed. Fixed in version 0.8.9.
- Affected estate
- Anyone running Crawl4AI's Docker API server prior to version 0.8.9, especially in cloud environments
- How to check
- Check the Crawl4AI container image tag or run 'pip show crawl4ai' inside the container to confirm the version.
- Included because
- unauthenticated; CVSS 8.6; SSRF to internal services; cloud metadata exposure risk
- Action
- Update to Crawl4AI 0.8.9+ and restrict network access to the Docker API server to trusted sources only.
- Why it matters
- An unauthenticated attacker can reach your internal services and cloud metadata endpoints through the proxy bypass, potentially stealing cloud credentials or hitting internal APIs.
- Source
- GitHub advisory
Evidence trail
- NVD: View source
One email, every Wednesday morning.
SubscribeFrom the field notes
From this beat
Read the rest of the field notes →