VulnFeed.org: Ubiquiti Inc airMAX Mhttps://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enCVE-2026-116836: A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability fouhttps://vulnfeed.org/cve/CVE-2026-116836/https://vulnfeed.org/cve/CVE-2026-116836/Tue, 27 Oct 2026 01:19:06 +0000A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.CVE-2026-116837: A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, andhttps://vulnfeed.org/cve/CVE-2026-116837/https://vulnfeed.org/cve/CVE-2026-116837/Tue, 27 Oct 2026 01:19:06 +0000A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.CVE-2026-116838: A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX https://vulnfeed.org/cve/CVE-2026-116838/https://vulnfeed.org/cve/CVE-2026-116838/Tue, 27 Oct 2026 01:19:06 +0000A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.