by Kastro
Paper/Archive/CVE-2026-6074

CVE-2026-6074

Intrado 911 Emergency Gateway — Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.2.462 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory.

Affected

ProductAffectedFixed inSource
911 Emergency GatewayVersions 7.x–CNA
911 Emergency GatewayVersions 6.x–CNA
911 Emergency GatewayVersions 5.x–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-113-06refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-06.json