Skip to content
OpenAdvisories
High · 8.8 CVE-2026-116837 EUVD-2026-110576GHSA-wmfj-f5h9-4hfc

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, Sola…

Published Oct 27, 2026 · Updated Nov 3, 2026 · Assigned by Ubiquiti

Description

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

Affected products

VendorProductAffectedFixed
Ubiquiti airMAX M < 6.3.26 6.3.26
Ubiquiti LTU PTMP < 2.4.2 2.4.2
Ubiquiti LTU PTP < 1.5.7 1.5.7
Ubiquiti SolarPoint / SolarSwitch < 2.0.3 2.0.3

References