Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-6074

Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Intrado 911 Emergency Gateway

Default version status: unaffected

  • Versions 7.xaffected
  • Versions 6.xaffected
  • Versions 5.xaffected

References