6.5Media
CVE-2026-18192Vacron|IP Camera - Arbitrary File Read
Descripción
VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
Debilidad (CWE):
CWE-23
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Vacron | VIN-DS783E-E6 | all |
Referencias y parches
- https://www.twcert.org.tw/tw/cp-132-11048-c8ce2-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11049-db9ae-2.html third-party-advisory