CVE-2026-22563: Input Validation
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22563?
CVE-2026-22563 has a high severity due to potential command injection vulnerabilities.
How do I fix CVE-2026-22563?
To fix CVE-2026-22563, update the UniFi Play PowerAmp to version 1.0.36 or later and UniFi Play Audio Port to version 1.0.25 or later.
Which products are affected by CVE-2026-22563?
CVE-2026-22563 affects UniFi Play PowerAmp version 1.0.35 and earlier, and UniFi Play Audio Port version 1.0.24 and earlier.
What kind of attack can CVE-2026-22563 facilitate?
CVE-2026-22563 can facilitate command injection attacks by malicious actors with access to the UniFi Play network.
Is there any specific mitigation for CVE-2026-22563?
The specific mitigation for CVE-2026-22563 is to promptly update the affected UniFi products to the latest versions.