CVE Catalog

CVE-2026-18191

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.38%

31th percentile - higher than 31% of all known CVEs

Summary

The Vacron VIN-DS783E-E6 device has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain administrator credentials.

Risk Assessment

An attacker could gain full control of the device, potentially leading to privacy breaches, espionage, or using the device as an entry point into the network.

Recommendation

Contact the manufacturer for available updates or mitigations, and consider disabling unnecessary remote features.

Original NVD description (English source)

VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain the administrator credentials of the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS