CVE-2026-18191

CriticalCVSS 9.8

Published: 29/07/2026(UTC)Updated: 23/10/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.69%

52th percentile - higher than 52% of all known CVEs

Summary

The Vacron VIN-DS783E-E6 device has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain administrator credentials.

Risk Assessment

An attacker could gain full control of the device, potentially leading to privacy breaches, espionage, or using the device as an entry point into the network.

Recommendation

Contact the manufacturer for available updates or mitigations, and consider disabling unnecessary remote features.

Other vulnerabilities in Vacron VIN-DS783E-E6

CVE-2026-18192Medium
The VIN-DS783E-E6 device from Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

Original NVD description (English source)

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS