← Back to CVE search

CVE-2026-22566

UniFi Play

Description

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier) Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later

CVSS 7.5EPSS 0.361%Risk 0.77
View source
Published
2026-04-13 22:16:28
Affected versions
<1.0.38, <1.1.9
Type
Firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N