Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
Published: 2026-07-02
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 06 Jul 2026 23:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability Enables Remote File Read on UniFi Protect Floodlight

Mon, 06 Jul 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Ubiquiti
Ubiquiti unifi Protect Floodlight
Vendors & Products Ubiquiti
Ubiquiti unifi Protect Floodlight

Mon, 06 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Ubiquiti UniFi Protect Floodlight Allows Remote File Read

Sun, 05 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Path Traversal Vulnerability in Ubiquiti UniFi Protect Floodlight Allows Remote File Read

Sun, 05 Jul 2026 12:30:00 +0000

Type Values Removed Values Added
Title Path Traversal Allows Remote File Read in Ubiquiti UniFi Protect Floodlight

Sun, 05 Jul 2026 02:00:00 +0000

Type Values Removed Values Added
Title Path Traversal Allows Remote File Read in Ubiquiti UniFi Protect Floodlight

Sat, 04 Jul 2026 10:15:00 +0000

Type Values Removed Values Added
Title UniFi Protect Floodlight Path Traversal Enables Remote File Read

Sat, 04 Jul 2026 05:30:00 +0000

Type Values Removed Values Added
Title UniFi Protect Floodlight Path Traversal Enables Remote File Read

Fri, 03 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Path Traversal in UniFi Protect Floodlight Enables File Read

Fri, 03 Jul 2026 06:30:00 +0000

Type Values Removed Values Added
Title Unauthenticated Path Traversal in UniFi Protect Floodlight Enables File Read

Thu, 02 Jul 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 02 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Description A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Ubiquiti Unifi Protect Floodlight
cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published:

Updated: 2026-07-02T15:51:52.648Z

Reserved: 2026-06-16T15:00:01.614Z

Link: CVE-2026-55111

cve-icon Vulnrichment

Updated: 2026-07-02T15:49:27.527Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-06T23:30:12Z

Weaknesses