CVE-2026-18192

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

Score

CVSS 4.0 7.1 High

Status

Deferred - twcert@cert.org.tw

Published

2026-07-29

Last modified

2026-10-23

Weaknesses

CWE-23

Affected products

• Vin-ds783e-e6 (Vacron)

References

• https://www.twcert.org.tw/tw/cp-132-11048-c8ce2-1.html
• https://www.twcert.org.tw/en/cp-139-11049-db9ae-2.html