CVE-2026-18191

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - twcert@cert.org.tw

Published

2026-07-29

Last modified

2026-10-23

Weaknesses

CWE-912

Affected products

• Vin-ds783e-e6 (Vacron)

References

• https://www.twcert.org.tw/tw/cp-132-11048-c8ce2-1.html
• https://www.twcert.org.tw/en/cp-139-11049-db9ae-2.html