Description
A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request.
Medium · 6.5
CVE-2026-35718
EUVD-2026-33970GHSA-rw3h-hf66-rvh4
A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated att…
Published Jun 2, 2026 · Updated Jul 5, 2026 · Assigned by mitre