CVE-2026-55117CWE-22path-traversal

CVE-2026-55117

High · published July 2, 2026

CVSS v3.1

8.6

EPSS

Percentile

45.9

In the wild

Unconfirmed

What it is

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.

The record

Technical detail

CVSS v3.1: 8.6 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00561 · 45.9th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-07-02T19:17Z

Affected products (1)

Product	Versions	Fixed in
ui/unifi_access	< 4.2.29	4.2.29

References (1)

https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc · [email protected]

EPSS history

Timeline

02 JUL 14:50Z
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device
cvelistv5