CVE-2026-55111 HIGH

CVE-2026-55111

Vendor Ubiquiti Inc

Product UniFi Protect Floodlight

Weakness CWE-22 · Path traversal

Published July 2, 2026

Last update July 2, 2026

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.

Key dates

02Disclosure timeline

July 2, 2026 CVE published

July 2, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-55111 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2026-49991 RustFS Snowball Auto-Extract: Path Traversal allows cross-bucket object injection CVE-2026-58302 CVE-2026-50003 OFFIS DCMTK Toolkit Path Traversal CVE-2026-48314 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-48282 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)