PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-78801 SKYWORTH DIGITAL CO., LTD CVE debrief

A remote information disclosure vulnerability exists in the SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3. An attacker can exploit this vulnerability to obtain sensitive information via the hidden_factory_switch.gch endpoint. This vulnerability allows unauthorized access to sensitive information, potentially leading to further exploitation. Network administrators and security teams should assess exposure and prioritize patching to prevent potential information disclosure. The CVE record and source item provide limited information about the vulnerability, and additional verification is necessary to confirm the affected versions and scope.

Vendor
SKYWORTH DIGITAL CO., LTD
Product
SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3
CVSS
Unknown
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-22
Original CVE updated
2026-10-26
Advisory published
2026-10-22
Advisory updated
2026-10-26

Who should care

Network administrators and security teams responsible for managing and securing SK-WR6640X routers should assess exposure and prioritize patching to prevent potential information disclosure.

Why it matters

CVE-2026-78801 is a remote information disclosure vulnerability in the SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3. Network administrators and security teams should assess exposure, prioritize patching, and monitor for potential information disclosure attempts.

  • Verify patch availability and apply updates to prevent information disclosure
  • Assess exposure of SK-WR6640X routers in the environment
  • Monitor for potential information disclosure attempts

Technical summary

The SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 contains a vulnerability that allows a remote attacker to obtain sensitive information via the hidden_factory_switch.gch endpoint. This vulnerability is a remote information disclosure issue, and its exploitation could lead to unauthorized access to sensitive information. The affected product is a Wi-Fi 6 Dual-Band Fiber Router, and the vulnerability is related to the handling of a specific endpoint. Further review of the official advisory or CVE record is necessary to confirm

Defensive priority

Verify and prioritize patching for SK-WR6640X routers, assess exposure, and monitor for potential information disclosure attempts.

Recommended defensive actions

  • Verify and prioritize patching for SK-WR6640X routers
  • Assess exposure and monitor for potential information disclosure attempts
  • Inventory and track SK-WR6640X routers for updates and patches

Evidence notes

The CVE record and source item provide limited information about the vulnerability. The vendor and product names are not confirmed, and the affected versions are not specified.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-78801 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-78801

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-78801 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-78801

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • CVE-2026-78801

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/78xxx/CVE-2026-78801.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://github.com/0xee9f00/AiDot-SSDP-UPnP-Vulnerabilities

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.