https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:00:27.535720+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256209 EUVD-2026-256209 2026-10-09T07:00:27.538606+00:00 EUVD-2026-256209 https://cve.radiocsirt.org/vuln/fkie_cve-2010-5330 fkie_cve-2010-5330 2026-10-09T07:00:27.538639+00:00

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.

 https://cve.radiocsirt.org/vuln/ghsa-c5j2-ggvf-gwvg GHSA-c5j2-ggvf-gwvg 2026-10-09T07:00:27.538670+00:00

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.

 https://cve.radiocsirt.org/vuln/gsd-2010-5330 gsd-2010-5330 2026-10-09T07:00:27.538688+00:00 gsd-2010-5330