Hijacking the Soundboard: Critical 9.8 RCE Flaws Hit Ubiquiti UniFi Play Audio

Ubiquiti issued an urgent advisory for UniFi Play audio devices describing several vulnerabilities—including critical RCEs (path traversal, command injection) rated CVSS 9.8—that can allow attackers with network access to fully compromise amplifiers and audio ports; additional high-severity issues include service interruption and access-control flaws. Affected versions and fixed updates are listed (UniFi Play PowerAmp <=1.0.35 → update to >=1.0.38; UniFi Play Audio Port <=1.0.24 → update to >=1.1.9).