This vulnerability (CVE-2026-22564) involves improper access control (CWE-284) in Ubiquiti's UniFi Play PowerAmp and UniFi Play Audio Port devices. An attacker with access to the UniFi Play network can enable SSH access without authorization, potentially allowing full system compromise. The issue affects UniFi Play PowerAmp versions up to 1.0.35 and UniFi Play Audio Port versions up to 1.0.24. The vendor has released updates (PowerAmp 1.0.38+, Audio Port 1.1.9+) that address this vulnerability. The CVSS score of 9.8 reflects the critical nature of this flaw, with network attack vector and no required privileges.

Successful exploitation allows an attacker on the UniFi Play network to enable SSH access and perform unauthorized changes to the affected devices. This can lead to full compromise of device confidentiality, integrity, and availability. The vulnerability is critical due to its high CVSS score (9.8) and the lack of required privileges or user interaction for exploitation.

Ubiquiti has provided official fixes for this vulnerability. Users should update UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later to remediate the issue. Applying these updates will mitigate the risk of unauthorized SSH access and system compromise.