This vulnerability (CVE-2026-6074) involves a path traversal issue (CWE-35) in the Intrado 911 Emergency Gateway product, affecting versions 5.x, 6.x, and 7.x. An attacker with network access can leverage the path traversal to reach the management interface without authentication. This unauthorized access could allow the attacker to read, modify, or delete files on the system. The vulnerability is rated critical with a CVSS 4.0 score of 9.3, reflecting network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Intrado as of the publication date.

Successful exploitation allows unauthenticated attackers with network access to bypass authentication controls on the management interface of the Intrado 911 Emergency Gateway. This can lead to unauthorized disclosure, modification, or deletion of files, potentially compromising system integrity and availability. Given the critical CVSS score, the impact on affected systems is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the Intrado 911 Emergency Gateway management interface to trusted users only. Monitor for unusual access attempts and consider network-level controls to limit exposure. Follow updates from Intrado for any forthcoming patches or mitigations.