CVE-2026-22564: Critical severity Ubiquiti UniFi Play PowerAmp vulnerability
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.
Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22564?
CVE-2026-22564 has a medium severity level due to the potential for unauthorized system changes by malicious actors.
How do I fix CVE-2026-22564?
To fix CVE-2026-22564, update the UniFi Play PowerAmp to version 1.0.36 or later and UniFi Play Audio Port to version 1.0.25 or later.
What products are affected by CVE-2026-22564?
CVE-2026-22564 affects UniFi Play PowerAmp version 1.0.35 and earlier, as well as UniFi Play Audio Port version 1.0.24 and earlier.
Can CVE-2026-22564 be exploited remotely?
Yes, CVE-2026-22564 can potentially be exploited remotely if the attacker has access to the UniFi Play network.
What kind of access does CVE-2026-22564 allow?
CVE-2026-22564 allows unauthorized changes to the system by enabling SSH access through improper access controls.