Monday, June 29, 2026 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

🎯 SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Risk scores will be adjusted based on your selected environment

Archived Security Brief

Monday's disclosures concentrate on network edge and enterprise communications platforms, led by multiple Ubiquiti UniFi OS flaws, a Cisco Unified Communications Manager defect, and PTC Windchill/FlexPLM. No new critical-rated (CVSS 9.0+) CVEs were recorded, down from 1 the prior day, while high-priority CVEs fell to 24 from 55, a 56% decrease. Notable entries include CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908 affecting Ubiquiti UniFi OS, CVE-2026-20230 in Cisco Unified CM, and CVE-2026-12569 in PTC Windchill and FlexPLM, all scored 9.5. Six of these vulnerabilities carry confirmed active exploitation, spanning network appliances, IoT device servers, and PLM systems. No patches were available across the disclosed set at publication time, so affected organizations should prioritize monitoring and compensating controls until vendor fixes ship.

  • Ubiquiti UniFi OS is the most affected platform, with three actively exploited flaws (CVE-2026-34910, CVE-2026-34909, CVE-2026-34908) each scored CVSS 9.5
  • Zero new critical-rated CVEs, down 100% from 1 the prior day
  • 24 high-priority CVEs, down 56% from 55 the prior day
  • Exploitation activity targets network and communications infrastructure, including Cisco Unified CM (CVE-2026-20230) and PTC Windchill/FlexPLM (CVE-2026-12569)
  • Patch availability stands at 0% across the disclosed set, leaving affected systems reliant on mitigations
  • Six vulnerabilities have confirmed active exploitation, also including Lantronix EDS5000 (CVE-2025-67038)

Immediate action: Prioritize Ubiquiti UniFi OS, Cisco Unified Communications Manager, PTC Windchill/FlexPLM, and Lantronix EDS5000 deployments, as these carry actively exploited vulnerabilities. With no patches currently available, restrict network exposure of these systems, apply vendor-recommended mitigations, and increase monitoring until fixes are released.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation