CVE-2026-22566: High severity Ubiquiti UniFi Play PowerAmp vulnerability
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.
Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22566?
CVE-2026-22566 has a high severity due to its improper access control that could allow credential access.
How do I fix CVE-2026-22566?
To mitigate CVE-2026-22566, update your UniFi Play PowerAmp to version 1.0.36 or later and UniFi Play Audio Port to version 1.0.25 or later.
What are the affected products for CVE-2026-22566?
CVE-2026-22566 affects UniFi Play PowerAmp versions 1.0.35 and earlier, and UniFi Play Audio Port versions 1.0.24 and earlier.
Can CVE-2026-22566 allow unauthorized access to WiFi credentials?
Yes, CVE-2026-22566 allows a malicious actor to access UniFi Play WiFi credentials if they have access to the affected network.
Is it safe to use UniFi Play products after updating for CVE-2026-22566?
Yes, after updating to the patched versions, UniFi Play products should be secure against CVE-2026-22566.