CVE-2026-96774 | SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107 Configuration File Download /ini/sys_cfg.txt loadCfg information disclosure

A vulnerability categorized as problematic has been discovered in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the file /ini/sys_cfg.txt of the component Configuration File Download. The manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-96774. The attack can be launched remotely. No exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More