UP
Product
UniFi Play PowerAmp
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch
Add UniFi Play PowerAmp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22563 | 9.8 | Apr 13 | A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network Affected: before 1.0.38 |
| CVE-2026-22562 | 9.8 | Apr 13 | A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used… Affected: before 1.0.38 |
| CVE-2026-22564 | 9.8 | Apr 13 | An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.
Affected… Affected: before 1.0.38 |
| CVE-2026-22566 | 7.5 | Apr 13 | An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.
Affected Products: UniFi… Affected: before 1.0.38 |
| CVE-2026-22565 | 7.5 | Apr 13 | An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.
Affected Products: UniFi… Affected: before 1.0.38 |
Showing 5