This vulnerability (CVE-2026-22564) involves improper access control (CWE-284) in Ubiquiti's UniFi Play PowerAmp and UniFi Play Audio Port devices. An attacker with access to the UniFi Play network can enable SSH access without authorization, potentially allowing full control over the affected devices. The vulnerability is present in UniFi Play PowerAmp versions up to 1.0.35 and UniFi Play Audio Port versions up to 1.0.24. The vendor has released updates (PowerAmp 1.0.38+, Audio Port 1.1.9+) that address this issue. The CVSS 3.1 base score of 9.8 reflects the critical nature of the flaw, with network attack vector, no privileges or user interaction needed, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker on the UniFi Play network to enable SSH access and make unauthorized changes to the system, compromising confidentiality, integrity, and availability of the affected devices. This could lead to full device compromise and potential further network impact. There are no known exploits in the wild currently.

Apply the official vendor updates: upgrade UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later. These updates address the improper access control vulnerability. No other mitigations are specified by the vendor.