{"id":"CVE-2026-78802","published":"2026-10-13T16:17:22.820","lastModified":"2026-10-16T19:56:15.773","description":"An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Skyworth/unauthorized-rce.md","tags":[]},{"url":"https://www.skyworthdigital.com/","tags":[]}],"exploitRefs":[{"url":"https://github.com/PRISMI-Team/VulnDisclos/blob/main/Routers/Skyworth/unauthorized-rce.md","tags":[]}],"hasPoc":true,"ai":{"summary":"A remote code execution vulnerability exists in the SKYWORTH WR6640X router firmware that allows attackers to execute arbitrary code on the device without authentication. This critical flaw enables full system compromise from an external network position.","exploitability":"The exploit is highly practical with no authentication required, allowing immediate remote code execution against vulnerable devices.","blast_radius":"The vulnerability affects all SKYWORTH WR6640X routers running firmware version 1.0.3, potentially exposing thousands of home and small office networks to complete takeover by remote attackers.","remediation":"Upgrade to firmware version 2.590 or later immediately to remediate this critical RCE vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","router","iot","network"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:46:56.451Z"}}