CVE-2026-22562

A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution RCE. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Por...

EUVD-2026-22093

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Port Version 1.0.24 and earlier Mitigation:...

CVE-2026-22562

A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution RCE. Affected Products: UniFi Play PowerAmp Version 1.0.35 and earlier UniFi Play Audio Por...

CVE-2026-22563

CVE-2026-22563 affects UniFi Play PowerAmp (≤1.0.35) and UniFi Play Audio Port (≤1.0.24). The vulnerability is due to improper input validation, enabling command injection by an attacker with access to the UniFi Play network. Impact is described as high confidentiality, integrity, and availabilit...

CVE-2026-22562

The CVE-2026-22562 entry concerns UniFi Play firmware where a Path Traversal vulnerability allows writing files on the system, enabling remote code execution. Affected are UniFi Play PowerAmp <= 1.0.35 and UniFi Play Audio Port = 1.0.38; Audio Port upgrades to >= 1.1.9. No exploitation deta...

CVE-2026-22564

CVE-2026-22564 describes an 00 improper access control vulnerability in UniFi Play components. The affected products are UniFi Play PowerAmp (<= 1.0.35) and UniFi Play Audio Port (