Ubiquiti Inc UniFi Play PowerAmp vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ubiquiti Inc UniFi Play PowerAmp: 5 record(s), with affected versions and fixes.
CVE-2026-22566
High · 7.5
CWE-284 Apr 13, 2026
Improper Access Control in Ubiquiti Inc UniFi Play PowerAmp
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.
Affected Products:
UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation:
Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later
CVE-2026-22565
High · 7.5
CWE-20 Apr 13, 2026
Improper Input Validation in Ubiquiti Inc UniFi Play PowerAmp
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.
Affected Products:
UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation:
Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later
CVE-2026-22564
Critical · 9.8
CWE-284 Apr 13, 2026
UniFi Play PowerAmp and Audio Port Improper Access Control
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.
Affected Products:
UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation:
Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later
CVE-2026-22563
Critical · 9.8
CWE-20 Apr 13, 2026
UniFi Play Command Injection via Improper Input Validation
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.
Affected Products:
UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation:
Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later
CVE-2026-22562
Critical · 9.8
CWE-22 Apr 13, 2026
Path Traversal in UniFi Play PowerAmp and Audio Port Firmware (CVE-2026-22562)
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution (RCE).
Affected Products:
UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation:
Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later