TVN ID	TVN-202607006
CVE ID	CVE-2026-18191, CVE-2026-18192
CVSS	【CVE-2026-18191】 9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 【CVE-2026-18192】 6.5 (Medium) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products	VIN-DS783E-E6
Description	【CVE-2026-18191(Hidden Functionality)】 Unauthenticated remote attackers can exploit a specific hidden function to obtain the administrator credentials of the device. 【CVE-2026-18192(Arbitrary File Read)】 Authenticated remote attackers can exploit Relative Path Traversal to download arbitrary system files.
Solution	Please contact the vendor for update.
Credit	Dirac Su(NICS)
Public Date	2026-07-29