CVE-2026-55111 is a CWE-22 Path Traversal vulnerability affecting UniFi Protect Floodlight devices by Ubiquiti Inc. An attacker with network access can exploit this vulnerability to access files on the device that should not be accessible. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact without affecting integrity or availability. No patch or official remediation level has been published yet, and no known exploits in the wild have been reported.

Successful exploitation could lead to unauthorized disclosure of sensitive files on the UniFi Protect Floodlight device. This compromises confidentiality but does not impact integrity or availability according to the CVSS vector. The vulnerability requires network access but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the UniFi Protect Floodlight devices to trusted users only and monitor for unusual access patterns.