CVE-2026-78799

Summary

A directory traversal vulnerability in the iKuai router firmware allows remote attackers to execute arbitrary code by manipulating file paths during firmware updates or configuration changes. This critical flaw enables full system compromise without authentication.

Exploitability

Exploitation is straightforward with no authentication required, allowing remote code execution through crafted file paths that traverse directories to overwrite critical system files.

Blast radius

The vulnerability affects enterprise-grade Wi-Fi routers deployed in business networks, potentially enabling attackers to gain complete control over hundreds or thousands of devices across multiple locations.

Detection

Monitor for unusual file modification patterns in /usr/local/bin/ and /etc/ directories, particularly when accessed via HTTP POST requests to /cgi-bin/ or /upload/ endpoints, and watch for unexpected process execution from these modified binaries.

Prioritized remediation

Upgrade to iKuai 8_4.0.305-beta or later to remediate this directory traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.