Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
Severity (CVSS)
| Base score | 7.5 |
|---|---|
| Severity | High |
| Version | CVSS 3.1 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Provided by | CNA |
Weaknesses
- CWE-22 — CWE-22 Path Traversal
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti Inc | UniFi Protect Floodlight | 0 to <1.13.6 |
References
Generated from the official CVE List on 03 Jul 2026 07:05 UTC.