CVE Intelligence
Analysis AI-assisted

CVE-2026-22564: UniFi Play PowerAmp and Audio Port Improper Access Control

CVE-2026-22564 is an Improper Access Control weakness (CWE-284) in UniFi Play PowerAmp and UniFi Play Audio Port. According to the record, a malicious actor with access to the UniFi Play network could enable SSH and make unauthorized changes to the system. The record lists fixed versions for both products, and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-22564 is an Improper Access Control weakness (CWE-284) affecting two UniFi Play products. The record states that a malicious actor with access to the UniFi Play network could enable SSH and make unauthorized changes to the system. The CVSS 3.1 base score is 9.8 (Critical), as recorded by the CNA.

Impact

  • The record describes unauthorized changes to the system after SSH is enabled.
  • The CVSS 3.1 vector indicates network attack vector, low complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity and availability.
  • The impact on any specific deployment depends on how the devices are configured and exposed, which the record does not describe.

Affected products and versions

  • UniFi Play PowerAmp: version 1.0.35 and earlier.
  • UniFi Play Audio Port: version 1.0.24 and earlier.

The record names fixed versions of PowerAmp 1.0.38 or later and Audio Port 1.1.9 or later. The structured affected and fixes fields in the source data are empty, so these version ranges come only from the description text.

Exploitation status

This CVE is not listed in the CISA KEV catalog according to the record. No confirmed exploitation appears in the sources consulted. The EPSS probability recorded is 0.0042 with a percentile of 0.34524.

Remediation and mitigation

  • Update UniFi Play PowerAmp to version 1.0.38 or later.
  • Update UniFi Play Audio Port to version 1.1.9 or later.
  • Review the vendor bulletin at Security Advisory Bulletin 063 on community.ui.com for vendor guidance.
  • Limit access to the UniFi Play network to trusted administrators and devices, and disable SSH on devices where it is not needed.

Detection guidance

  • Compare the SSH service state on affected devices with the expected configuration baseline.
  • Review configuration and system change logs for modifications that were not planned.
  • Monitor the UniFi Play network for administrative sessions from unknown hosts.

Limitations of the available information

  • The record title is empty, and the structured affected and fixes fields are empty.
  • The record does not describe technical details of the flaw or the conditions required beyond network access.
  • The record does not state whether any product versions outside those listed are affected.
  • The EPSS date in the record is later than the publication date, so its timing should be verified against the source.

Frequently asked questions

What is CVE-2026-22564?

It is an Improper Access Control vulnerability (CWE-284) in UniFi Play PowerAmp and UniFi Play Audio Port, according to the record.

Which versions are affected?

The record lists PowerAmp 1.0.35 and earlier, and Audio Port 1.0.24 and earlier.

Which versions fix the issue?

The record names PowerAmp 1.0.38 or later and Audio Port 1.1.9 or later.

Is this CVE known to be exploited?

It is not listed in CISA KEV in the record, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.