What is the CVSS score of CVE-2026-9776?

CVE-2026-9776 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.6%.

Which versions of Unizon are affected by CVE-2026-9776?

ATEN Unizon contains an unauthenticated remote path-traversal vulnerability allowing attackers to read arbitrary files including credentials, system configuration, and OS-level data.

How to fix or mitigate CVE-2026-9776?

Within 24 hours: Inventory all ATEN Unizon deployments; document internet exposure and network location; enable audit logging for file access patterns. Within 7 days: Restrict network access to ATEN Unizon via firewall rules limiting to trusted internal IPs only; disable internet-facing access if operationally feasible; rotate credentials stored in systems managed by ATEN Unizon as precautionary measure. Within 30 days: Contact ATEN for patch timeline and alternative versions; conduct log forensics to detect potential exploitation; evaluate replacement remote management solutions if patch timeline extends beyond 90 days.

Unizon CVE-2026-9776

EUVD-2026-39114 HIGH

Path Traversal (CWE-22)

2026-06-24 zdi

GHSA-685c-hvrm-mjvc

Information Disclosure Path Traversal Unizon Aten

7.5

CVSS 3.0 · Vendor: zdi

Severity by source

Vendor (zdi) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (zdi) · only source for this CVE.

CVSS VectorVendor: zdi

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jun 24, 2026 - 22:23 vuln.today

DescriptionCVE.org

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the writeFileToHttpServletResponse method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of SYSTEM. Was ZDI-CAN-28505.

AnalysisAI

Unauthenticated information disclosure in ATEN Unizon allows remote attackers to read arbitrary files from affected installations by abusing a path-traversal weakness in the writeFileToHttpServletResponse method. Because the underlying service runs with SYSTEM privileges, an attacker can exfiltrate sensitive files including configuration, credentials, and OS-level data. Cataloged via ZDI (ZDI-26-380 / ZDI-CAN-28505) with no public exploit identified at time of analysis; not listed in CISA KEV and no EPSS score was provided.