CVE-2026-18192

MediumCVSS 6.5

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

The VIN-DS783E-E6 device from Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

Risk Assessment

An attacker can download sensitive system files such as configurations, passwords, or credentials, leading to full compromise of the device and network.

Recommendation

Contact the manufacturer for a fix and restrict device access to trusted networks only.

Other vulnerabilities in Vacron VIN-DS783E-E6

CVE-2026-18191Critical
The Vacron VIN-DS783E-E6 device has a Hidden Functionality vulnerability, allowing unauthenticated remote attackers to exploit a specific hidden function to obtain administrator credentials.

Original NVD description (English source)

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.