CVE-2026-7766 is a path traversal vulnerability in the Kenik KG-5230TAS-IL-3 camera management panel. It allows unauthenticated attackers to send GET requests with arbitrary file paths to read files on the server outside the intended directory. The issue affects multiple Kenik camera models, with patches released in April 2025 and April 2026 for different product lines. The vulnerability has a CVSS 4.0 score of 8.3, indicating high severity due to unauthenticated remote access with high impact on confidentiality. No vendor advisory explicitly confirms patch availability for KG-5230TAS-IL-3, so remediation status should be verified.

An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the affected device's server, potentially exposing sensitive information. The vulnerability impacts confidentiality but does not indicate integrity or availability impact. The high CVSS score reflects the ease of exploitation and the potential sensitivity of exposed data. No known exploits in the wild have been reported.

The vendor released fixes for related products in April 2025 and April 2026. Users of KG-5230TAS-IL-3 should check the official Kenik advisories for patch availability and apply updates accordingly. Until confirmed patched, restrict network access to the management panel to trusted users only. Monitor vendor channels for updated remediation information. Patch status is not yet confirmed for KG-5230TAS-IL-3 specifically; verify with Kenik's official guidance.