Ubiquiti UniFi Play Improper Access Control Vulnerability Allowing WiFi Credential Theft

Vulnerability

A vulnerability in Ubiquiti UniFi Play products related to improper access control could enable a malicious actor to access WiFi credentials. This issue affects UniFi Play PowerAmp versions through 1.0.35 and UniFi Play Audio Port versions through 1.0.24.

Impact

Exploitation of this vulnerability could lead to unauthorized access to UniFi Play WiFi credentials.

Remediation

Users can update UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later to address this vulnerability.

Added: Apr 13, 2026, 10:43 PM
Updated: Apr 13, 2026, 10:43 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.9
remediation
0.0
relevance
5.8
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.