Skip to content
OpenAdvisories
High · 8.8 CVE-2026-21639 EUVD-2026-1493GHSA-9vw7-2gjw-jc6x

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote…

Published Jan 8, 2026 · Updated Jul 30, 2026 · Assigned by hackerone

Vendor: Ubiquiti Product: airFiber AF60 Product: airFiber AF60-XG Product: airMAX AC Product: airMAX M Category: Network devices

Description

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.

Affected products

VendorProductAffectedFixed
Ubiquiti airMAX AC < 8.7.21 8.7.21
Ubiquiti airMAX M < 6.3.24 6.3.24
Ubiquiti airFiber AF60-XG < 1.2.3 1.2.3
Ubiquiti airFiber AF60 < 2.6.8 2.6.8

References