{"id":"CVE-2026-78799","aliases":["EUVD-2026-98961","GHSA-rcp7-qh7p-59r7"],"status":"published","title":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000...","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: \u003c= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: \u003c= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01312,"percentile":0.7106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2026-10-13T00:00:00Z","modified":"2026-10-16T19:56:15Z","references":[{"url":"https://www.ikuai8.com/component/download"},{"url":"https://www.ikuai8.com/"},{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/iKuai/authorized-path-raversal.md"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78799"},{"url":"https://www.ikuai8.com"},{"url":"https://github.com/advisories/GHSA-rcp7-qh7p-59r7"}],"sources":{"cve":[{"id":"CVE-2026-78799","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: \u003c= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: \u003c= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-15T14:46:16.898Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T13:34:59.78118Z"}],"euvd":[{"id":"EUVD-2026-98961","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: \u003c= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: \u003c= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","status":"published","published":"2026-10-13T00:00:00Z","modified":"2026-10-15T14:46:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:00:14.20041Z"}],"ghsa":[{"id":"GHSA-rcp7-qh7p-59r7","title":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000...","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: \u003c= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: \u003c= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","status":"published","published":"2026-10-13T18:30:57Z","modified":"2026-10-15T18:31:57Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:13:36.44286Z"}],"nvd":[{"id":"CVE-2026-78799","description":"Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: \u003c= iKuai8_3.7.23_Enterprise Build 202606021825 - Free Edition: \u003c= iKuai 8_4.0.304-beta allows a remote attacker to execute arbitrary code.","status":"published","published":"2026-10-13T17:17:46.453Z","modified":"2026-10-16T19:56:15.773Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:12:57.132005Z"}]}}