CVE-2026-78799CWE-22path-traversal

CVE-2026-78799

Critical · published October 13, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: <= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01312 · 70.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-10-13T21:17Z
References (3)
https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/iKuai/authorized-path-raversal.md · [email protected]https://www.ikuai8.com/ · [email protected]https://www.ikuai8.com/component/download · [email protected]
EPSS history
Timeline
  • 15 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 13 OCT 00:00Z
    Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition…
    cvelistv5
  • 13 OCT 00:00Z
    Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition…
    cvelistv5