Ubiquiti Inc UniFi Play Poweramp vulnerabilities

5 CVEs affecting Ubiquiti Inc UniFi Play Poweramp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-22566, published 2026-04-13.

More from Ubiquiti Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-22563, published 2026-04-13. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp (Version…
• CVE-2026-22562, published 2026-04-13. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code…
• CVE-2026-22565, published 2026-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.
 Affected Products: UniFi Play PowerAmp…
• CVE-2026-22564, published 2026-04-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.
 Affected Products: UniFi Play…
• CVE-2026-22566, published 2026-04-13. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.
 Affected Products: UniFi Play PowerAmp (Version…