Vulnerability Details CVE-2026-21638
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.
Affected Products:
UBB-XG (Version 1.2.2 and earlier)
UDB-Pro/UDB-Pro-Sector (Version 1.4.1 and earlier)
UBB (Version 3.1.5 and earlier)
Mitigation:
Update your UBB-XG to Version 1.2.3 or later.
Update your UDB-Pro/UDB-Pro-Sector to Version 1.4.2 or later.
Update your UBB to Version 3.1.7 or later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.4%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-21638
-
cpe:2.3:h:ui:ubb-xg:-
-
cpe:2.3:h:ui:ubb:-
-
cpe:2.3:h:ui:udb-pro-sector:-
-
cpe:2.3:h:ui:udb-pro:-
-
cpe:2.3:o:ui:ubb-xg_firmware:*
-
cpe:2.3:o:ui:ubb_firmware:*
-
cpe:2.3:o:ui:udb-pro-sector_firmware:*
-
cpe:2.3:o:ui:udb-pro_firmware:*