CVE-2010-5330

Ubiquiti AirOS Command Injection Vulnerability

Ubiquiti — AirOS

Added to KEV catalog: 15 April 2022
Federal remediation due date: 6 May 2022
Weakness classification (CWE): CWE-77

CISA Description

Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2010-5330

View on NVD View on MITRE CVE View full CISA catalog

More Ubiquiti Vulnerabilities

CVE-2026-34910

Ubiquiti UniFi OS Improper Input Validation Vulnerability

CVE-2026-34909

Ubiquiti UniFi OS Path Traversal Vulnerability

CVE-2026-34908

Ubiquiti UniFi OS Improper Access Control Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services