CVE-2026-22562: Path Traversal
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution (RCE). Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier) Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22562?
CVE-2026-22562 is a critical severity vulnerability that could allow for remote code execution due to a Path Traversal flaw.
How do I fix CVE-2026-22562?
To fix CVE-2026-22562, update your UniFi Play PowerAmp or UniFi Play Audio Port to the latest version beyond 1.0.35 and 1.0.24 respectively.
What products are affected by CVE-2026-22562?
CVE-2026-22562 affects the UniFi Play PowerAmp (up to version 1.0.35) and the UniFi Play Audio Port (up to version 1.0.24).
What type of vulnerability is CVE-2026-22562?
CVE-2026-22562 is a Path Traversal vulnerability that can lead to unauthorized file writing and potential remote code execution.
Can CVE-2026-22562 be exploited remotely?
Yes, CVE-2026-22562 can be exploited remotely by a malicious actor with access to the UniFi Play network.