This vulnerability (CVE-2026-22565) involves improper input validation (CWE-20) in Ubiquiti Inc's UniFi Play PowerAmp and UniFi Play Audio Port devices. Specifically, malformed input from an attacker with network access can cause the affected devices to become unresponsive, effectively causing a denial of service condition. The issue affects UniFi Play PowerAmp versions up to 1.0.35 and UniFi Play Audio Port versions up to 1.0.24. The vendor has released fixed versions (PowerAmp 1.0.38+ and Audio Port 1.1.9+) that remediate this vulnerability. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability.

Successful exploitation results in a denial of service by causing the affected device to stop responding. There is no impact to confidentiality or integrity reported. The vulnerability requires network access to the UniFi Play devices but no privileges or user interaction. No known exploits in the wild have been documented.

A fix is available. Users should update UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later to remediate this vulnerability. There is no indication that temporary workarounds or mitigations are provided or required beyond applying these updates.