CVE-2026-18192 is a relative path traversal vulnerability (CWE-23) in the Vacron VIN-DS783E-E6 product. Authenticated remote attackers can exploit this flaw to perform arbitrary file reads on the system by manipulating file path inputs. The vulnerability has a CVSS 4.0 base score of 7.1, indicating high severity with network attack vector, low attack complexity, no privileges beyond authentication, and no user interaction required. No official patch or remediation guidance has been published by the vendor as of the data provided.

Successful exploitation allows an authenticated remote attacker to read arbitrary files on the affected system, potentially exposing sensitive information. The vulnerability does not escalate privileges or allow code execution but compromises confidentiality by unauthorized file access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system to trusted users only and monitor for suspicious authenticated activity related to file access. No official remediation or temporary fix has been provided by the vendor at this time.