Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.
Source: NVD ↗ · CISA KEV Catalog ↗