CVE-2026-18191
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
The Vacron VIN-DS783E-E6 device has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain administrator credentials.
Risk Assessment
An attacker could gain full control of the device, potentially leading to privacy breaches, espionage, or using the device as an entry point into the network.
Recommendation
Contact the manufacturer for available updates or mitigations, and consider disabling unnecessary remote features.
Original NVD description (English source)
VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

