This vulnerability (CVE-2026-22565) involves improper input validation (CWE-20) in Ubiquiti's UniFi Play PowerAmp and UniFi Play Audio Port devices. Specifically, malformed input from an actor with network access to the UniFi Play environment can cause the device to become unresponsive. The issue affects UniFi Play PowerAmp versions up to 1.0.35 and UniFi Play Audio Port versions up to 1.0.24. Vendor guidance indicates that updating to UniFi Play PowerAmp 1.0.38 or later and UniFi Play Audio Port 1.1.9 or later mitigates the vulnerability. The vulnerability is not related to cloud services, and no official CVSS score or remediation level is provided in the source data.

Successful exploitation allows a malicious actor with network access to cause the affected device to stop responding, resulting in denial of service conditions on UniFi Play PowerAmp and UniFi Play Audio Port devices. There is no indication of further compromise such as code execution or data leakage from the provided information.

Apply the vendor-provided updates by upgrading UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later. These updates address the improper input validation vulnerability. Since this is a device-level issue and not a cloud service, remediation requires applying these firmware/software updates directly to the affected devices.