CVE-2026-22564General

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.  Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier)  UniFi Play Audio Port (Version 1.0.24 and earlier)  Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later  Update UniFi Play Audio Port to Version 1.1.9 or later

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://community.ui.com/releases/Security-Advisory-Bulletin-063/e468dd4b-5090-4ef8-89d8-939903c08e83

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
9 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
General: 5 classified signals
Disclosure: 2 classified signals
Peaked 2d ago at 3 mentions (2026-04-14); latest day: 3
9 total mentions across 4 days

Deep dive

Activity timeline9 mentions / 4d

Signal classification3 categories

General

555.6%

Patch

222.2%

Disclosure

222.2%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-13	1	Patch1
2026-04-14	3	Disclosure2Patch1
2026-05-10	2	General2
2026-06-08	3	General3

Full discourse9 posts

CCB Alert@CCBalert177d
Patch
Warning: CVE-2026-22562, CVE-2026-22563, CVE-2026-22564 - critical vulnerabilities in #Ubiquiti UniFi Play PowerAmp could allow #remote attackers to complete device compromise. No user interaction may be required. #Patch #Patch #Patch
Post summary
The post warns of critical CVE-2026-22562/63/64 affecting Ubiquiti UniFi Play PowerAmp, potentially enabling remote device compromise without user interaction, and notes that patches are available.
01000191
7.2K followersView on X
Dave@RideToFireStar122d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The text is a recap listing numerous UniFi-related CVEs with associated severity scores, but contains no further technical or operational details.
00000116
1.2K followersView on X
Dave@RideToFireStar122d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The tweet lists numerous UniFi CVEs for 2026 with severity ratings but lacks technical details, patches, or evidence of exploitation.
0000057
1.2K followersView on X
Dave@RideToFireStar122d
General
Yawn 🥱 2026 recap: UniFi OS: - CVE-2026-34908 - 10 - CVE-2026-34909 - 10 - CVE-2026-34910 - 10 - CVE-2026-33000 - 9.1 - CVE-2026-34911 - 7.7 UniFi Play Devices: - CVE-2026-22563 - 9.8 - CVE-2026-22562 - 9.8 - CVE-2026-22564 - 9.8 - CVE-2026-22566 - 7.5 - CVE-2026-22565 - 7.5 UniFi Network (Controller): - CVE-2026-22557 - 10 - CVE-2026-22558 - 7.7 - CVE-2026-22559 - 8.8 UniFi Protect: - CVE-2026-21633 - 8.8 - CVE-2026-21634 - 6.5 UniFi airMAX: - CVE-2026-21638 - 8.8 So much fail, and we're not even halfway through 2026. Lots of 10s and 9s. 🤡🩰
Post summary
The post enumerates several new UniFi CVEs with associated severity scores, but offers no technical depth, exploitation evidence, or mitigation guidance.
00000110
1.2K followersView on X
Lyrie.ai@lyrie_ai152d
General
https://lyrie.ai/research/research/cve-2026-22564-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet links to an advisory for CVE-2026-22564 but contains no further details; it merely references the CVE without elaborating on PoC, exploit, patch, or other specifics.
0000019
189 followersView on X
Lyrie.ai@lyrie_ai152d
General
Unpopular opinion: The cybersecurity industry is selling you dashboards. CVE: CVE-2026-22564 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post references CVE-2026-22564 with its critical CVSS score and severity but does not detail exploitation, patching, or mitigation.
0000036
197 followersView on X
CVE@CVEnew178d
Disclosure
CVE-2026-22564 An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.… https://www.cve.org/CVERecord?id=CVE-2026-22564
Post summary
A brief CVE record link describing an Improper Access Control flaw in UniFi Play that could let a malicious actor enable SSH for unauthorized system changes.
00000121
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds178d
Disclosure
CVE-2026-22564 Improper Access Control in UniFi Play PowerAmp and Audio Port Enables Unauthorized SSH Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22564
Post summary
CVE-2026-22564 is an improper access‑control flaw in UniFi Play PowerAmp and Audio Port that allows unauthorized SSH access, as detailed in the linked vulnerability information.
0000058
4.0K followersView on X
CVEFind.com@CveFindCom178d
Patch
[CVE-2026-22564: CRITICAL] Vulnerability discovered in UniFi Play network. Update UniFi Play PowerAmp to v1.0.38+ and UniFi Play Audio Port to v1.1.9+ to fix improper access control risk.#cve,CVE-2026-22564,#cybersecurity https://cvefind.com/CVE-2026-22564
Post summary
The post announces CVE-2026-22564, identifies it as an improper access control risk on UniFi Play devices, and provides firmware update versions to mitigate the issue.
0000068
620 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-22564

Dave[verified]@RideToFireStarGeneral

The text is a recap listing numerous UniFi-related CVEs with associated severity scores, but contains no further technical or operational details.

Dave[verified]@RideToFireStarGeneral

The tweet lists numerous UniFi CVEs for 2026 with severity ratings but lacks technical details, patches, or evidence of exploitation.

Dave[verified]@RideToFireStarGeneral

The post enumerates several new UniFi CVEs with associated severity scores, but offers no technical depth, exploitation evidence, or mitigation guidance.

Lyrie.ai[verified]@lyrie_aiGeneral

The tweet links to an advisory for CVE-2026-22564 but contains no further details; it merely references the CVE without elaborating on PoC, exploit, patch, or other specifics.

Lyrie.ai[verified]@lyrie_aiGeneral

The post references CVE-2026-22564 with its critical CVSS score and severity but does not detail exploitation, patching, or mitigation.

CCB Alert@CCBalertPatch

The post warns of critical CVE-2026-22562/63/64 affecting Ubiquiti UniFi Play PowerAmp, potentially enabling remote device compromise without user interaction, and notes that patches are available.

CVE@CVEnewDisclosure

A brief CVE record link describing an Improper Access Control flaw in UniFi Play that could let a malicious actor enable SSH for unauthorized system changes.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

CVE-2026-22564 is an improper access‑control flaw in UniFi Play PowerAmp and Audio Port that allows unauthorized SSH access, as detailed in the linked vulnerability information.