Medium severity6.5NVD Advisory· Published Jun 2, 2026· Updated Jun 3, 2026

CVE-2026-35718

Description

A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vivotek/FD8136llm-fuzzy
Range: 0300a
Xchg Rax Rax/Vulnerability Researchllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/xchg-rax-rax/vulnerability-research/tree/main/CVE-2026-35718nvdThird Party Advisory
vivotek.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000