Path Traversal Weakness in UniFi Play Firmware by Ubiquiti

CVE-2026-22562

What is CVE-2026-22562?

A vulnerability exists in the UniFi Play devices that can be exploited by a malicious actor with access to the network. This Path Traversal flaw enables an attacker to write unauthorized files to the device's file system. Such actions can potentially lead to remote code execution, putting the integrity and confidentiality of the device at significant risk. To mitigate this issue, users are advised to upgrade to UniFi Play PowerAmp Version 1.0.38 or later and UniFi Play Audio Port Version 1.1.9 or later.

References