{"id":"CVE-2026-78801","kind":"vulnerability","aliases":["CVE-2026-78801"],"related":[],"title":"SKYWORTH fiber router: remote attacker can obtain sensitive information","description":"An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_factory_switch.gch","summary":"The SKYWORTH SK-WR6640X AX1800M fiber router firmware V1.0.3 exposes a hidden factory switch file, according to the NVD description. A remote attacker can use it to obtain sensitive information from the device.","severity":"unknown","cvss":null,"epss":0.00258,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firmware","infrastructure","iot","router","skyworth"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-22T15:17:06+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T05:00:29+00:00","updated_at":"2026-10-25T05:00:29+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:00:29Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"internet","title":"SKYWORTH fiber router: remote attacker can obtain sensitive information","impact":"low","summary":"The SKYWORTH SK-WR6640X AX1800M fiber router firmware V1.0.3 exposes a hidden factory switch file, according to the NVD description. A remote attacker can use it to obtain sensitive information from the device.","category":"infrastructure","nicknames":[],"who_cares":["skyworth","router","firmware","iot"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Sensitive device information is exposed to remote attackers","analyst_note":"Check the NVD entry and vendor advisories for the affected endpoint, required access, and whether a firmware fix exists for SK-WR6640X V1.0.3.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Owners and operators of SKYWORTH SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) devices on firmware V1.0.3. The sources do not say which specific configurations or network exposure are required, so unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000564,"input_tokens":3383,"output_tokens":452,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-78801':12A,15A '6':68C 'accord':37B 'allow':76C 'attack':5A,44B,79C 'ax1800m':26B,74C 'band':71C 'co':60C 'cve':10A,13A 'descript':41B 'devic':54B 'digit':59C 'dual':70C 'dual-band':69C 'expos':31B 'factori':34B 'fi':67C 'fiber':2A,27B,72C 'file':36B 'firmwar':16B,29B 'hidden':33B 'hidden_factory_switch.gch':86C 'inform':9A,51B,83C 'infrastructur':17B 'iot':18B 'issu':56C 'ltd':61C 'nvd':40B 'obtain':7A,49B,81C 'remot':4A,43B,78C 'router':3A,19B,28B,73C 'sensit':8A,50B,82C 'sk':24B,63C 'sk-wr6640x':23B,62C 'skyworth':1A,20B,22B,58C 'switch':35B 'use':46B 'v1.0.3':30B,75C 'via':84C 'wi':66C 'wi-fi':65C 'wr6640x':25B,64C","nicknames":[],"mitigations":[],"who_affected":"Owners and operators of SKYWORTH SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) devices on firmware V1.0.3. The sources do not say which specific configurations or network exposure are required, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T15:17:06+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-78801","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78801","severity":null,"published_at":"2026-10-22T15:17:06+00:00","modified_at":"2026-10-22T17:40:46+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-78801","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-78801","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}