ZDI-26-126 MEDIUM 5.4 Published Feb 25, 2026

Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability

Ubiquiti

Ubiquiti Networks AI Pro contains a medium-severity protocol downgrade vulnerability (CVE-2026-21633) that allows network-adjacent attackers to force the system to use weaker communication protocols without requiring authentication. By exploiting this flaw, attackers can potentially intercept or manipulate communications between devices on the same network segment. Security teams should prioritize patching affected Ubiquiti AI Pro installations and consider network segmentation to limit access to trusted devices only, while monitoring for suspicious protocol downgrades in network traffic.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy