A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Ubiquiti
  • Unifi Protect Floodlight

No data.

No data.

References
Link Providers
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc cve-icon
History

Mon, 06 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability Enables Remote File Read on UniFi Protect Floodlight

Mon, 06 Jul 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Ubiquiti
Ubiquiti unifi Protect Floodlight
Vendors & Products Ubiquiti
Ubiquiti unifi Protect Floodlight

Mon, 06 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Ubiquiti UniFi Protect Floodlight Allows Remote File Read

Sun, 05 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Ubiquiti UniFi Protect Floodlight Allows Remote File Read

Sun, 05 Jul 2026 12:30:00 +0000

Type Values Removed Values Added
Title Path Traversal Allows Remote File Read in Ubiquiti UniFi Protect Floodlight

Sun, 05 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Path Traversal Allows Remote File Read in Ubiquiti UniFi Protect Floodlight

Sat, 04 Jul 2026 10:15:00 +0000

Type Values Removed Values Added
Title UniFi Protect Floodlight Path Traversal Enables Remote File Read

Sat, 04 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title UniFi Protect Floodlight Path Traversal Enables Remote File Read

Fri, 03 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Path Traversal in UniFi Protect Floodlight Enables File Read

Fri, 03 Jul 2026 06:30:00 +0000

Type Values Removed Values Added
Title Unauthenticated Path Traversal in UniFi Protect Floodlight Enables File Read

Thu, 02 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 02 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Description A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2026-07-02T14:49:17.257Z

Updated: 2026-07-02T15:51:52.648Z

Reserved: 2026-06-16T15:00:01.614Z

Link: CVE-2026-55111

cve-icon Vulnrichment

Updated: 2026-07-02T15:49:27.527Z

cve-icon NVD

No data.

cve-icon Redhat

No data.