Vendor access
This part is for Aigna staff
Vendors see their own installation and the device reference they need to build it: device types, setup guides and models. Everything else stays with Aigna.
Go to your installationModule
Assets is switched off
Device types, units, models, setup guides, standards, IT stores and cables. This demo has the Assets module switched off in Organisation settings.
Assets capability
Security flaws is switched off
Published security flaws per firmware line, and the units exposed. This demo has Security flaws switched off in Organisation settings, so nothing of it shows anywhere.
Security flawsfrom the vendor advisoriesSimulated
Security flaws
3 flaws expose 188 units · 2 more may affect 117 units, 1 critical
Restricted: vulnerable-firmware list
- 100 units may beCritical 9.3CVE-DEMO-2026-0103
Remote management can be reached from the internet side
- In
- Ubiquiti UniFi Express 7 (UX7)
- Affected
- Before 4.1.13
- Fix
- Fix available: 4.1.13
- Published
- 12 Sept 2026
Home gateway versions are not tracked in Atlas, so every home office gateway may be exposed. Check in the UniFi controller.
The 100 units that may be, by office
Remote EMEA 38
AG-000941, AG-001022, AG-000943, AG-000969, AG-001046, AG-000971, AG-000973, AG-000957, AG-000953, AG-000955, AG-000965, AG-000985, AG-000981, AG-000983, AG-001049, AG-001052, AG-001058, AG-001061, AG-001055, AG-000987, AG-001034, AG-000949, AG-000951, AG-001028 and 14 moreRemote Americas 38
AG-001480, AG-001482, AG-001502, AG-001504, AG-001506, AG-001013, AG-001015, AG-001017, AG-001498, AG-001500, AG-001064, AG-000989, AG-000991, AG-001462, AG-000993, AG-001494, AG-001496, AG-001484, AG-001486, AG-001488, AG-001005, AG-001007, AG-001019, AG-001471 and 14 moreRemote APAC 24
AG-001545, AG-001561, AG-001543, AG-001539, AG-001541, AG-001533, AG-001536, AG-001527, AG-001530, AG-001520, AG-001522, AG-001553, AG-001555, AG-001515, AG-001517, AG-001557, AG-001559, AG-001508, AG-001510, AG-001512, AG-001525, AG-001547, AG-001549, AG-001551 - 14 units exposedHigh 8.1CVE-DEMO-2026-0101
The web API returns an admin session to a crafted request
- In
- Poly VideoOS: Poly Studio X32, Poly Studio X52, Poly Studio X72, Poly Studio G62, Poly TC10
- Affected
- 4.6.1 and earlier
- Fix
- Fixed in the standard: 4.6.2.460046
- Published
- 20 Feb 2026
Fixed in the standard. Units still on 4.6.1 move up in the next firmware window.
The 14 units exposed, by office
New York office 2
nyc-2008-vc01 (4.6.1.444241), nyc-2008-tc01 (4.6.1.444241)Dublin office 2
dub-401-vc01 (4.6.1.444241), dub-401-tc01 (4.6.1.444241)London office 2
lon-204-vc01 (4.6.1.444241), lon-204-tc01 (4.6.1.444241)Chicago office 2
chi-1204-vc01 (4.6.1.444241), chi-1204-tc01 (4.6.1.444241)Toronto office 2
tor-704-vc01 (4.6.1.444241), tor-704-tc01 (4.6.1.444241)Singapore office 2
sin-1205-vc01 (4.6.1.444241), sin-1205-tc01 (4.6.1.444241)Melbourne office 2
mel-803-vc01 (4.6.1.444241), mel-803-tc01 (4.6.1.444241) - 171 units exposedMedium 5.4CVE-DEMO-2026-0102
A paired touch controller can be re-paired from the room network
- In
- Poly VideoOS: Poly Studio X32, Poly Studio X52, Poly Studio X72, Poly Studio G62, Poly TC10
- Affected
- 4.6.2 and earlier
- Fix
- Fix in the Lab: 4.7.0-466077
- Published
- 18 Jun 2026
The fix is in 4.7.0, which is in the Lab (LAB-07). Room systems VLAN rules limit who can reach them meanwhile.
The 171 units exposed, by office
New York office 41
nyc-2004-vc01 (4.6.2.460046), nyc-2004-tc01 (4.6.2.460046), nyc-2005-tc01 (4.6.2.460046), nyc-2006-vc01 (4.6.2.460046), nyc-2006-tc01 (4.6.2.460046), nyc-2007-vc01 (4.6.2.460046), nyc-2007-tc01 (4.6.2.460046), nyc-2008-vc01 (4.6.1.444241), nyc-2008-tc01 (4.6.1.444241), nyc-2009-vc01 (4.6.2.460046), nyc-2009-tc01 (4.6.2.460046), nyc-2010-vc01 (4.6.2.460046), nyc-2010-tc01 (4.6.2.460046), nyc-2011-vc01 (4.6.2.460046), nyc-2011-tc01 (4.6.2.460046), nyc-2101-vc01 (4.6.2.460046), nyc-2101-tc01 (4.6.2.460046), nyc-2102-vc01 (4.6.2.460046), nyc-2102-tc01 (4.6.2.460046), nyc-2103-vc01 (4.6.2.460046), nyc-2103-tc01 (4.6.2.460046), nyc-2104-vc01 (4.6.2.460046), nyc-2104-tc01 (4.6.2.460046), nyc-2105-vc01 (4.6.2.460046) and 17 moreDublin office 34
dub-303-vc01 (4.6.2.460046), dub-303-tc01 (4.6.2.460046), dub-304-vc01 (4.6.2.460046), dub-304-tc01 (4.6.2.460046), dub-305-vc01 (4.6.2.460046), dub-305-tc01 (4.6.2.460046), dub-306-vc01 (4.6.2.460046), dub-306-tc01 (4.6.2.460046), dub-307-vc01 (4.6.2.460046), dub-307-tc01 (4.6.2.460046), dub-308-vc01 (4.6.2.460046), dub-308-tc01 (4.6.2.460046), dub-309-vc01 (4.6.2.460046), dub-309-tc01 (4.6.2.460046), dub-310-vc01 (4.6.2.460046), dub-310-tc01 (4.6.2.460046), dub-401-vc01 (4.6.1.444241), dub-401-tc01 (4.6.1.444241), dub-402-vc01 (4.6.2.460046), dub-402-tc01 (4.6.2.460046), dub-403-vc01 (4.6.2.460046), dub-403-tc01 (4.6.2.460046), dub-404-vc01 (4.6.2.460046), dub-404-tc01 (4.6.2.460046) and 10 moreLondon office 10
lon-201-vc01 (4.6.2.460046), lon-201-tc01 (4.6.2.460046), lon-202-vc01 (4.6.2.460046), lon-202-tc01 (4.6.2.460046), lon-203-vc01 (4.6.2.460046), lon-203-tc01 (4.6.2.460046), lon-204-vc01 (4.6.1.444241), lon-204-tc01 (4.6.1.444241), lon-205-vc01 (4.6.2.460046), lon-205-tc01 (4.6.2.460046)Chicago office 24
chi-1203-vc01 (4.6.2.460046), chi-1203-tc01 (4.6.2.460046), chi-1204-vc01 (4.6.1.444241), chi-1204-tc01 (4.6.1.444241), chi-1205-vc01 (4.6.2.460046), chi-1205-tc01 (4.6.2.460046), chi-1206-vc01 (4.6.2.460046), chi-1206-tc01 (4.6.2.460046), chi-1207-vc01 (4.6.2.460046), chi-1207-tc01 (4.6.2.460046), chi-1208-vc01 (4.6.2.460046), chi-1208-tc01 (4.6.2.460046), chi-1301-vc01 (4.6.2.460046), chi-1301-tc01 (4.6.2.460046), chi-1302-vc01 (4.6.2.460046), chi-1302-tc01 (4.6.2.460046), chi-1303-vc01 (4.6.2.460046), chi-1303-tc01 (4.6.2.460046), chi-1304-vc01 (4.6.2.460046), chi-1304-tc01 (4.6.2.460046), chi-1305-vc01 (4.6.2.460046), chi-1305-tc01 (4.6.2.460046), chi-1306-vc01 (4.6.2.460046), chi-1306-tc01 (4.6.2.460046)Toronto office 10
tor-701-vc01 (4.6.2.460046), tor-701-tc01 (4.6.2.460046), tor-702-vc01 (4.6.2.460046), tor-702-tc01 (4.6.2.460046), tor-703-vc01 (4.6.2.460046), tor-703-tc01 (4.6.2.460046), tor-704-vc01 (4.6.1.444241), tor-704-tc01 (4.6.1.444241), tor-705-vc01 (4.6.2.460046), tor-705-tc01 (4.6.2.460046)Singapore office 10
sin-1201-vc01 (4.6.2.460046), sin-1201-tc01 (4.6.2.460046), sin-1202-vc01 (4.6.2.460046), sin-1202-tc01 (4.6.2.460046), sin-1203-vc01 (4.6.2.460046), sin-1203-tc01 (4.6.2.460046), sin-1204-vc01 (4.6.2.460046), sin-1204-tc01 (4.6.2.460046), sin-1205-vc01 (4.6.1.444241), sin-1205-tc01 (4.6.1.444241)Melbourne office 14
mel-803-vc01 (4.6.1.444241), mel-803-tc01 (4.6.1.444241), mel-804-vc01 (4.6.2.460046), mel-804-tc01 (4.6.2.460046), mel-805-vc01 (4.6.2.460046), mel-805-tc01 (4.6.2.460046), mel-806-vc01 (4.6.2.460046), mel-806-tc01 (4.6.2.460046), mel-807-vc01 (4.6.2.460046), mel-807-tc01 (4.6.2.460046), mel-808-vc01 (4.6.2.460046), mel-808-tc01 (4.6.2.460046), mel-809-vc01 (4.6.2.460046), mel-809-tc01 (4.6.2.460046)Tokyo office 14
tyo-1503-vc01 (4.6.2.460046), tyo-1503-tc01 (4.6.2.460046), tyo-1504-vc01 (4.6.2.460046), tyo-1504-tc01 (4.6.2.460046), tyo-1505-vc01 (4.6.2.460046), tyo-1505-tc01 (4.6.2.460046), tyo-1506-vc01 (4.6.2.460046), tyo-1506-tc01 (4.6.2.460046), tyo-1507-vc01 (4.6.2.460046), tyo-1507-tc01 (4.6.2.460046), tyo-1508-vc01 (4.6.2.460046), tyo-1508-tc01 (4.6.2.460046), tyo-1509-vc01 (4.6.2.460046), tyo-1509-tc01 (4.6.2.460046)Copenhagen office 14
cph-403-vc01 (4.6.2.460046), cph-403-tc01 (4.6.2.460046), cph-404-vc01 (4.6.2.460046), cph-404-tc01 (4.6.2.460046), cph-405-vc01 (4.6.2.460046), cph-405-tc01 (4.6.2.460046), cph-406-vc01 (4.6.2.460046), cph-406-tc01 (4.6.2.460046), cph-407-vc01 (4.6.2.460046), cph-407-tc01 (4.6.2.460046), cph-408-vc01 (4.6.2.460046), cph-408-tc01 (4.6.2.460046), cph-409-vc01 (4.6.2.460046), cph-409-tc01 (4.6.2.460046) - 17 units may beMedium 6.5CVE-DEMO-2026-0104
A malformed LLDP frame restarts the switch
- In
- Netgear AV Line M4250-9G1F-PoE+ (GSM4210PD)
- Affected
- Before 13.0.4.26
- Fix
- Fix available: 13.0.4.26
- Published
- 4 Aug 2026
In-room AV switch versions are not tracked in Atlas.
The 17 units that may be, by office
New York office 4
nyc-2004-sw01, nyc-2010-sw01, nyc-2105-sw01, nyc-2201-sw01Dublin office 6
dub-303-sw01, dub-309-sw01, dub-421-avs01, dub-502-sw01, dub-504-sw01, dub-521-avs01London office 1
lon-203-sw01Chicago office 2
chi-1208-sw01, chi-1320-avs01Toronto office 1
tor-703-sw01Singapore office 1
sin-1203-sw01Melbourne office 1
mel-808-sw01Copenhagen office 1
cph-407-sw01 - 17 units exposedLow 3.1CVE-DEMO-2026-0105
The USB camera accepts firmware that is not signed
- In
- Logitech MeetUp 2
- Affected
- All versions
- Fix
- No fix yet
- Published
- 1 Sept 2026
No fix published yet. Only someone with the USB cable in hand could use it.
The 17 units exposed, by office
New York office 7
nyc-2109-vc01, nyc-2110-vc01, nyc-2111-vc01, nyc-2207-vc01, nyc-2208-vc01, nyc-2209-vc01, nyc-2210-vc01Dublin office 2
dub-407-vc01, dub-408-vc01Chicago office 3
chi-1307-vc01, chi-1308-vc01, chi-1309-vc01Melbourne office 1
mel-810-vc01Tokyo office 2
tyo-1510-vc01, tyo-1511-vc01Copenhagen office 2
cph-410-vc01, cph-411-vc01
No flaws match these filters.
Made-up flaws for the demo, with made-up ids (CVE-DEMO-...): not real advisories. A unit on a tracked firmware line (Poly VideoOS) is exposed when its version is older than the fix; its version is simulated, as on Known errors. Where Atlas does not track a model's versions, each unit may be exposed until checked in its management platform.