EUVD-2026-22094
GHSA-hj6r-ww52-66xr
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
10DescriptionCVE.org
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.
Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier) UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later Update UniFi Play Audio Port to Version 1.1.9 or later
AnalysisAI
Denial of service in Ubiquiti UniFi Play PowerAmp (≤1.0.35) and Audio Port (≤1.0.24) allows unauthenticated remote attackers to crash devices via improper input validation. CVSS 7.5 (High) with network-based attack requiring no privileges or user interaction. EPSS score of 0.01% (1st percentile) indicates minimal real-world exploitation likelihood. No public exploit identified at time of analysis. Vendor-released patches available: PowerAmp 1.0.38+ and Audio Port 1.1.9+.
Technical ContextAI
This vulnerability affects Ubiquiti's UniFi Play audio networking equipment, specifically the PowerAmp and Audio Port products which provide networked audio distribution capabilities. The root cause is CWE-20 (Improper Input Validation), where the devices fail to properly sanitize or validate network input before processing. This input validation weakness allows malformed or crafted packets to trigger an unhandled exception or resource exhaustion condition, causing the device firmware to enter an unresponsive state. The affected CPE strings (cpe:2.3:a:ubiquiti_inc:unifi_play_poweramp and cpe:2.3:a:ubiquiti_inc:unifi_play_audio_port) confirm these are application-layer vulnerabilities in the device management interfaces rather than hardware flaws. The network attack vector (AV:N) suggests the vulnerability exists in a remotely-accessible service, likely the device's web management interface or API endpoint used for configuration and control of the audio networking features.
RemediationAI
Update UniFi Play PowerAmp to firmware version 1.0.38 or later, and update UniFi Play Audio Port to firmware version 1.1.9 or later. Firmware updates should be obtained through the official Ubiquiti UniFi management console or downloaded directly from Ubiquiti's support portal. Consult the vendor's Security Advisory Bulletin 063 at https://community.ui.com/releases/Security-Advisory-Bulletin-063/e468dd4b-5090-4ef8-89d8-939903c08e83 for detailed upgrade instructions and release notes. As an interim workaround until patching is completed, network segmentation can reduce exposure by restricting access to these devices to trusted management networks only, blocking external or untrusted network access to the device management interfaces via firewall rules or VLAN isolation. No alternative workarounds are documented by the vendor, making firmware updates the definitive remediation.
More in Unifi Play Poweramp
View allPath traversal in UniFi Play PowerAmp (≤1.0.35) and Audio Port (≤1.0.24) firmware allows unauthenticated remote attacker
Critical command injection in Ubiquiti UniFi Play PowerAmp and Audio Port allows remote unauthenticated attackers to exe
Remote unauthenticated attackers can enable SSH and gain complete system control on Ubiquiti UniFi Play PowerAmp (≤1.0.3
Improper access control in Ubiquiti UniFi Play PowerAmp (≤1.0.35) and Audio Port (≤1.0.24) exposes WiFi credentials to n
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today