CVE Intelligence
Analysis AI-assisted

CVE-2026-6074: Intrado 911 EGW Path Traversal in Debug Log Download

Intrado 911 Emergency Gateway (EGW) versions 5.x, 6.x and 7.x contain a path traversal weakness in the download_debuglog_file.php endpoint. According to the record, an unauthenticated attacker could read files outside the intended directory, and ICS-CERT rates it critical with a CVSS 3.1 score of 9.8. No fixed versions or affected version details are listed in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The Intrado 911 Emergency Gateway (EGW) versions 5.x, 6.x and 7.x contain a path traversal weakness in the download_debuglog_file.php endpoint, which handles downloads of Debug Logs. The record states that the flaw can be reached without authentication. The CNA, ICS-CERT, assigns a critical rating with a CVSS 3.1 base score of 9.8 and also lists a CVSS 4.0 score of 9.3.

Impact

  • The record describes the ability to read arbitrary files outside the intended directory.
  • The CVSS 3.1 vector recorded for this CVE indicates high impact on confidentiality, integrity and availability.
  • Because no authentication is required according to the record, exposure of the affected interface is the main factor determining real-world risk.

Affected Products and Versions

  • Product: Intrado 911 Emergency Gateway (EGW).
  • Versions named in the record: 5.x, 6.x and 7.x.
  • The structured affected-product list in the record is empty, so exact build numbers and version boundaries are unknown from the sources consulted.

Exploitation Status

  • The record shows this CVE is not listed in the CISA Known Exploited Vulnerabilities catalog.
  • No confirmed exploitation in the wild appears in the sources consulted.
  • The EPSS value in the record is 0.0067 (percentile 0.50663), which estimates likelihood of exploitation but is not evidence of observed attacks.

Remediation and Mitigation

  • Check the CISA advisory ICSA-26-113-06 and the vendor guidance for the fixed release and upgrade path, since the record does not list any fixed version.
  • Until a fix is applied, restrict network access to the EGW and its debug log functions to trusted administrative networks only.
  • Review whether the Debug Logs download feature is needed and disable or limit it where operationally possible.
  • Treat the system as high priority given the critical rating and the unauthenticated access described in the record.

Detection Guidance

  • Review web server and application logs for requests to the download_debuglog_file.php endpoint, especially from unexpected sources or with unusual parameter values.
  • Monitor for unexpected file access or data egress from EGW hosts.
  • Correlate alerts with asset inventories to confirm which EGW instances run versions in the affected range.

Limitations of the Available Information

  • The record does not include a fixed version, a patch reference, or a structured list of affected builds.
  • The CWE name is not provided in the record; only the identifier CWE-35 is listed.
  • The EPSS date in the record is later than the publication date, so the timing of that score should be verified against its source.
  • Exploitation status is limited to what the consulted sources report.

Frequently asked questions

What is the core risk of CVE-2026-6074?

According to the record, an unauthenticated attacker could use the download_debuglog_file.php endpoint to read files outside the intended directory. ICS-CERT rates it critical with CVSS 3.1 score 9.8.

Is this vulnerability known to be exploited?

The record shows it is not listed in CISA KEV, and no confirmed exploitation appears in the sources consulted.

Which versions are affected and what is the fix?

The record names Intrado 911 EGW versions 5.x, 6.x and 7.x, but lists no structured affected builds or fixed versions. Check advisory ICSA-26-113-06 and vendor guidance.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.