Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Ubiquiti Inc | airMAX M | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Ubiquiti | Airmax M | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 27 Oct 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | CSRF in Ubiquiti airMAX M Enables Unauthorized Config Changes and DoS |
Tue, 27 Oct 2026 08:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Ubiquiti
Ubiquiti airmax M |
|
| Vendors & Products |
Ubiquiti
Ubiquiti airmax M |
Tue, 27 Oct 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device. | |
| Weaknesses | CWE-352 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Ubiquiti
Published:
Updated: 2026-10-27T00:51:23.745Z
Reserved: 2026-10-27T00:05:24.427Z
Link: CVE-2026-116839
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-10-27T01:19:07.093
Modified: 2026-10-27T15:08:50.630
Link: CVE-2026-116839
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-27T08:30:13Z
-
CWE-352
Cross-Site Request Forgery (CSRF)