Improper Input Validation Issues in UniFi Play Products from Ubiquiti

CVE-2026-22563

What is CVE-2026-22563?

Multiple improper input validation vulnerabilities exist in Ubiquiti's UniFi Play product line, particularly affecting the UniFi Play PowerAmp and UniFi Play Audio Port. These vulnerabilities may allow attackers with network access to execute commands through injected inputs, potentially compromising the integrity and functionality of the devices. To mitigate these risks, users should ensure they are running the latest versions of the affected products: UniFi Play PowerAmp should be updated to version 1.0.38 or later, and UniFi Play Audio Port should be updated to version 1.1.9 or later.

References