CVE-2026-22563General

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier)
 UniFi Play Audio Port  (Version 1.0.24 and earlier)
 Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later
 Update UniFi Play Audio Port  to Version 1.1.9 or later

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

RISING

Threat summary

  • Patch or workaround signal is available
  • 13 mentions across 4 observed days
  • Momentum state: rising

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 7 signals
  • General: 6 classified signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 5 mentions (2026-05-10); latest day: 3
  • 13 total mentions across 4 days

Deep dive

Activity timeline13 mentions / 4d
01345Mentions · 2026-04-13: 1Mentions · 2026-04-14: 4Mentions · 2026-05-10: 5Mentions · 2026-06-08: 3Patch / Workaround · 2026-04-13: 1Patch / Workaround · 2026-04-14: 1Patch / Workaround · 2026-05-10: 1Technical Details · 2026-04-13: 1Technical Details · 2026-04-14: 2Technical Details · 2026-05-10: 404-1304-1405-1006-08
Signal classification3 categories
General
646.2%
Disclosure
430.8%
Patch
323.1%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-04-131
Patch1
2026-04-144
Disclosure1General2Patch1
2026-05-105
Disclosure3General1Patch1
2026-06-083
General3
Full discourse13 posts
  • Lyrie.ai@lyrie_ai
    Disclosure

    CRITICAL: CVE-2026-22563 (CVSS 9.8) — multiple products. CVE: CVE-2026-22563 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory

    Post summary

    The post announces CVE-2026-22563 as a critical CVSS 9.8 vulnerability affecting multiple products, but it provides no evidence of PoC, exploit, active exploitation, or patch availability.

    1000024
    197 followersView on X
  • CCB Alert@CCBalert
    Patch

    Warning: CVE-2026-22562, CVE-2026-22563, CVE-2026-22564 - critical vulnerabilities in #Ubiquiti UniFi Play PowerAmp could allow #remote attackers to complete device compromise. No user interaction may be required. #Patch #Patch #Patch

    Post summary

    The warning highlights critical vulnerabilities in Ubiquiti UniFi Play PowerAmp that could allow remote attackers to fully compromise devices, urging patching, but offers no technical or exploit details.

    01000191
    7.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The post merely lists several UniFi-related CVEs from 2026 with their severity ratings, providing no additional technical or exploit information.

    00000116
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The note simply catalogs a list of UniFi-related CVEs with associated severity scores, providing no technical, exploit, or mitigation details.

    0000057
    1.2K followersView on X
  • Dave@RideToFireStar
    General

    Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰

    Post summary

    The post lists several CVEs with associated scores but provides no additional details, tools, or claims of exploitation.

    00000110
    1.2K followersView on X
  • Lyrie.ai@lyrie_ai
    General

    https://lyrie.ai/research/research/cve-2026-22563-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack

    Post summary

    The link simply references an advisory for CVE‑2026‑22563 without any additional details or claims in the provided text.

    0000013
    189 followersView on X
  • Lyrie.ai@lyrie_ai
    Patch

    Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later
 Update UniFi Play Audio Port  to Version 1.1.9 or later CVE: CVE-2026-22563 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory

    Post summary

    The advisory recommends updating UniFi Play PowerAmp to 1.0.38+ and Audio Port to 1.1.9+ to mitigate CVE-2026-22563, a critical vulnerability with CVSS 9.8; no exploit evidence or active use is reported.

    0000062
    197 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    CVE: CVE-2026-22563 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play…

    Post summary

    The text announces CVE-2026-22563, a critical command injection flaw in UniFi Play, providing CVSS details and severity but no PoC, patch, or exploit code.

    0000042
    197 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier)
 UniFi Play Audio Port  (Version 1.0.24 and earlier) CVE: CVE-2026-22563 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory

    Post summary

    An advisory discloses a critical CVE-2026-22563 affecting UniFi Play PowerAmp and Audio Port devices, highlighting a CVSS 9.8 score but lacking details on exploitation, PoC, or remediation.

    0000060
    197 followersView on X
  • CTIWatch@ctiwatchcloud
    General

    🔍 Today's Top Vulnerabilities 🔴 CVE-2026-27681 | CVSS 9.9 🔴 CVE-2026-6195 | CVSS 9.8 🔴 CVE-2026-22563 | CVSS 9.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel

    Post summary

    The post lists three top CVEs with high CVSS scores and provides a link to an external site for further information.

    0000067
    5.6K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-22563 A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network. Affected Products:… https://www.cve.org/CVERecord?id=CVE-2026-22563

    Post summary

    The text discloses CVE-2026-22563 as an improper input validation flaw that could allow command injection on UniFi Play devices, but provides no exploit, patch, or active exploitation details.

    00000106
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-22563 Command Injection via Improper Input Validation in UniFi Play Products https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22563

    Post summary

    The text announces CVE-2026-22563 as a command injection vulnerability in UniFi Play Products, but provides no PoC, exploit, active use, or patch information.

    0000039
    4.0K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-22563: CRITICAL] Warning: Cyber security issue in UniFi Play products! Improper Input Validation vulnerabilities could lead to Command Injection. Update affected devices immediately to secure your ...#cve,CVE-2026-22563,#cybersecurity https://cvefind.com/CVE-2026-22563

    Post summary

    The tweet alerts that a critical CVE-2026-22563 impacts UniFi Play products, causing potential command injection through improper input validation, and urges users to update the devices immediately.

    0000059
    620 followersView on X

Explore more