{"id":1703,"date":"2026-06-28T07:22:23","date_gmt":"2026-06-28T00:22:23","guid":{"rendered":"https:\/\/vncybers.vn\/cisa-canh-bao-lo-hong-ubiquiti-unifi-os-da-bi-khai-thac\/"},"modified":"2026-06-28T07:22:23","modified_gmt":"2026-06-28T00:22:23","slug":"cisa-canh-bao-lo-hong-ubiquiti-unifi-os-da-bi-khai-thac","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/cisa-canh-bao-lo-hong-ubiquiti-unifi-os-da-bi-khai-thac\/","title":{"rendered":"CISA c\u1ea3nh b\u00e1o l\u1ed7 h\u1ed5ng Ubiquiti UniFi OS \u0111\u00e3 b\u1ecb khai th\u00e1c: B\u00e0i h\u1ecdc v\u1ec1 qu\u1ea3n tr\u1ecb thi\u1ebft b\u1ecb m\u1ea1ng"},"content":{"rendered":"

C\u01a1 quan An ninh m\u1ea1ng v\u00e0 C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng M\u1ef9 (CISA) \u0111\u00e3 \u0111\u01b0a ba l\u1ed7 h\u1ed5ng trong Ubiquiti UniFi OS<\/strong> v\u00e0o danh m\u1ee5c Known Exploited Vulnerabilities sau khi c\u00f3 b\u1eb1ng ch\u1ee9ng b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf. Di\u1ec5n bi\u1ebfn n\u00e0y l\u00e0 l\u1eddi nh\u1eafc r\u00f5 r\u00e0ng r\u1eb1ng thi\u1ebft b\u1ecb m\u1ea1ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng qu\u1ea3n tr\u1ecb t\u1eadp trung, c\u1ea7n \u0111\u01b0\u1ee3c xem l\u00e0 t\u00e0i s\u1ea3n r\u1ee7i ro cao ch\u1ee9 kh\u00f4ng ch\u1ec9 l\u00e0 h\u1ea1 t\u1ea7ng ph\u1ee5 tr\u1ee3.<\/p>\n

C\u00e1c l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c CISA ghi nh\u1eadn g\u1ed3m CVE-2026-34908<\/strong>, CVE-2026-34909<\/strong> and CVE-2026-34910<\/strong>. Theo m\u00f4 t\u1ea3 c\u00f4ng khai, chu\u1ed7i l\u1ed7i n\u00e0y c\u00f3 th\u1ec3 m\u1edf \u0111\u01b0\u1eddng cho thay \u0111\u1ed5i tr\u00e1i ph\u00e9p tr\u00ean h\u1ec7 th\u1ed1ng UniFi OS, \u0111\u1ecdc t\u1ec7p nh\u1ea1y c\u1ea3m v\u00e0 th\u1ef1c thi l\u1ec7nh h\u1ec7 \u0111i\u1ec1u h\u00e0nh t\u1eeb xa trong m\u1ed9t s\u1ed1 \u0111i\u1ec1u ki\u1ec7n nh\u1ea5t \u0111\u1ecbnh.<\/p>\n

\"Thi\u1ebft<\/p>\n

V\u00ec sao c\u1ea3nh b\u00e1o n\u00e0y \u0111\u00e1ng ch\u00fa \u00fd?<\/h2>\n

UniFi OS th\u01b0\u1eddng \u0111\u00f3ng vai tr\u00f2 trung t\u00e2m trong vi\u1ec7c qu\u1ea3n l\u00fd thi\u1ebft b\u1ecb m\u1ea1ng, \u0111i\u1ec3m truy c\u1eadp, camera ho\u1eb7c gateway t\u1ea1i doanh nghi\u1ec7p nh\u1ecf, v\u0103n ph\u00f2ng chi nh\u00e1nh v\u00e0 m\u1ed9t s\u1ed1 m\u00f4i tr\u01b0\u1eddng d\u1ecbch v\u1ee5. Khi giao di\u1ec7n qu\u1ea3n tr\u1ecb b\u1ecb ph\u01a1i l\u1ed9 ra Internet ho\u1eb7c \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 k\u00e9m, m\u1ed9t l\u1ed7 h\u1ed5ng x\u00e1c th\u1ef1c hay th\u1ef1c thi l\u1ec7nh c\u00f3 th\u1ec3 nhanh ch\u00f3ng tr\u1edf th\u00e0nh \u0111i\u1ec3m b\u00e1m ban \u0111\u1ea7u cho k\u1ebb t\u1ea5n c\u00f4ng.<\/p>\n

CISA kh\u00f4ng c\u00f4ng b\u1ed1 chi ti\u1ebft v\u1ec1 c\u00e1c chi\u1ebfn d\u1ecbch khai th\u00e1c, nh\u01b0ng vi\u1ec7c \u0111\u01b0a l\u1ed7 h\u1ed5ng v\u00e0o KEV Catalog cho th\u1ea5y r\u1ee7i ro kh\u00f4ng c\u00f2n \u1edf m\u1ee9c l\u00fd thuy\u1ebft. BleepingComputer c\u0169ng ghi nh\u1eadn r\u1eb1ng Ubiquiti \u0111\u00e3 ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 t\u1eeb th\u00e1ng 5, trong khi Bishop Fox t\u1eebng ch\u1ee9ng minh kh\u1ea3 n\u0103ng x\u00e2u chu\u1ed7i c\u00e1c l\u1ed7i \u0111\u1ec3 \u0111\u1ea1t th\u1ef1c thi m\u00e3 t\u1eeb xa v\u1edbi \u0111\u1eb7c quy\u1ec1n cao tr\u00ean thi\u1ebft b\u1ecb d\u1ec5 t\u1ed5n th\u01b0\u01a1ng.<\/p>\n

B\u00e0i h\u1ecdc cho qu\u1ea3n tr\u1ecb vi\u00ean<\/h2>\n

\u0110i\u1ec3m quan tr\u1ecdng kh\u00f4ng ch\u1ec9 l\u00e0 c\u1eadp nh\u1eadt m\u1ed9t s\u1ea3n ph\u1ea9m c\u1ee5 th\u1ec3. V\u1ee5 vi\u1ec7c nh\u1ea5n m\u1ea1nh m\u00f4 h\u00ecnh qu\u1ea3n tr\u1ecb l\u1ed7 h\u1ed5ng d\u1ef1a tr\u00ean r\u1ee7i ro: \u01b0u ti\u00ean thi\u1ebft b\u1ecb \u0111ang ph\u01a1i l\u1ed9, thi\u1ebft b\u1ecb c\u00f3 quy\u1ec1n \u0111i\u1ec1u ph\u1ed1i h\u1ea1 t\u1ea7ng v\u00e0 c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u00e3 c\u00f3 b\u1eb1ng ch\u1ee9ng khai th\u00e1c. V\u1edbi nh\u00f3m t\u00e0i s\u1ea3n n\u00e0y, vi\u1ec7c ch\u1eadm v\u00e1 v\u00e0i tu\u1ea7n c\u00f3 th\u1ec3 t\u1ea1o ra kho\u1ea3ng tr\u1ed1ng \u0111\u1ee7 l\u1edbn \u0111\u1ec3 b\u1ecb r\u00e0 qu\u00e9t v\u00e0 chi\u1ebfm quy\u1ec1n.<\/p>\n

C\u00e1c t\u1ed5 ch\u1ee9c n\u00ean ki\u1ec3m k\u00ea to\u00e0n b\u1ed9 thi\u1ebft b\u1ecb UniFi OS, x\u00e1c \u0111\u1ecbnh phi\u00ean b\u1ea3n \u0111ang ch\u1ea1y, \u0111\u1ed1i chi\u1ebfu v\u1edbi b\u1ea3n v\u00e1 c\u1ee7a nh\u00e0 cung c\u1ea5p v\u00e0 h\u1ea1n ch\u1ebf truy c\u1eadp giao di\u1ec7n qu\u1ea3n tr\u1ecb t\u1eeb Internet c\u00f4ng c\u1ed9ng. N\u1ebfu t\u1eebng v\u1eadn h\u00e0nh phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng, c\u1ea7n r\u00e0 so\u00e1t nh\u1eadt k\u00fd \u0111\u0103ng nh\u1eadp, c\u1ea5u h\u00ecnh thay \u0111\u1ed5i b\u1ea5t th\u01b0\u1eddng, t\u00e0i kho\u1ea3n m\u1edbi ph\u00e1t sinh v\u00e0 d\u1ea5u hi\u1ec7u truy c\u1eadp t\u1ec7p nh\u1ea1y c\u1ea3m.<\/p>\n

Khuy\u1ebfn ngh\u1ecb th\u1ef1c thi<\/h2>\n

Qu\u1ea3n tr\u1ecb vi\u00ean n\u00ean c\u1eadp nh\u1eadt UniFi OS l\u00ean phi\u00ean b\u1ea3n \u0111\u00e3 v\u00e1, tri\u1ec3n khai x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 cho t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb, gi\u1edbi h\u1ea1n truy c\u1eadp b\u1eb1ng VPN ho\u1eb7c danh s\u00e1ch IP tin c\u1eady, \u0111\u1ed3ng th\u1eddi gi\u00e1m s\u00e1t thay \u0111\u1ed5i c\u1ea5u h\u00ecnh m\u1ea1ng. V\u1edbi m\u00f4i tr\u01b0\u1eddng c\u00f3 nhi\u1ec1u chi nh\u00e1nh, c\u1ea7n b\u1ed5 sung ki\u1ec3m tra \u0111\u1ecbnh k\u1ef3 \u0111\u1ec3 ph\u00e1t hi\u1ec7n thi\u1ebft b\u1ecb b\u1ecb b\u1ecf qu\u00ean ho\u1eb7c \u0111ang ch\u1ea1y firmware c\u0169.<\/p>\n

M\u1ed9t bi\u1ec7n ph\u00e1p th\u1ef1c t\u1ebf kh\u00e1c l\u00e0 \u0111\u01b0a c\u00e1c CVE \u0111\u00e3 v\u00e0o KEV Catalog v\u00e0o h\u00e0ng \u0111\u1ee3i v\u00e1 \u01b0u ti\u00ean cao. C\u00e1ch ti\u1ebfp c\u1eadn n\u00e0y gi\u00fap \u0111\u1ed9i v\u1eadn h\u00e0nh tr\u00e1nh d\u00e0n tr\u1ea3i ngu\u1ed3n l\u1ef1c, t\u1eadp trung tr\u01b0\u1edbc v\u00e0o nh\u1eefng \u0111i\u1ec3m y\u1ebfu \u0111\u00e3 \u0111\u01b0\u1ee3c ch\u1ee9ng minh c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb l\u1ee3i d\u1ee5ng trong th\u1ef1c t\u1ebf.<\/p>\n

Conclusion<\/h2>\n

C\u1ea3nh b\u00e1o c\u1ee7a CISA v\u1ec1 Ubiquiti UniFi OS cho th\u1ea5y thi\u1ebft b\u1ecb m\u1ea1ng v\u1eabn l\u00e0 m\u1ee5c ti\u00eau h\u1ea5p d\u1eabn v\u00ec c\u00f3 v\u1ecb tr\u00ed \u0111\u1eb7c quy\u1ec1n trong h\u1ea1 t\u1ea7ng. B\u1ea3n v\u00e1 l\u00e0 b\u01b0\u1edbc \u0111\u1ea7u ti\u00ean, nh\u01b0ng ki\u1ec3m k\u00ea t\u00e0i s\u1ea3n, gi\u1edbi h\u1ea1n b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng v\u00e0 gi\u00e1m s\u00e1t sau v\u00e1 m\u1edbi l\u00e0 n\u1ec1n t\u1ea3ng gi\u00fap gi\u1ea3m r\u1ee7i ro b\u1ec1n v\u1eefng.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb CISA, BleepingComputer v\u00e0 Bishop Fox<\/em><\/p>","protected":false},"excerpt":{"rendered":"

C\u01a1 quan An ninh m\u1ea1ng v\u00e0 C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng M\u1ef9 (CISA) \u0111\u00e3 \u0111\u01b0a ba l\u1ed7 h\u1ed5ng trong Ubiquiti UniFi OS v\u00e0o danh m\u1ee5c Known Exploited Vulnerabilities sau khi c\u00f3 b\u1eb1ng ch\u1ee9ng b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf. Di\u1ec5n bi\u1ebfn n\u00e0y l\u00e0 l\u1eddi nh\u1eafc r\u00f5 r\u00e0ng r\u1eb1ng thi\u1ebft b\u1ecb m\u1ea1ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng […]<\/p>\n","protected":false},"author":2,"featured_media":1701,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[287,37,284,285,286,283,289,288,281,282],"class_list":["post-1703","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-bishop-fox","tag-cisa","tag-cve-2026-34908","tag-cve-2026-34909","tag-cve-2026-34910","tag-kev-catalog","tag-quan-tri-lo-hong","tag-thiet-bi-mang","tag-ubiquiti","tag-unifi-os"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1703","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1703"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1703\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1701"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1703"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1703"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}