By vendor

Aten vulnerabilities

Known CVEs affecting Aten products, prioritized by severity, with SEC.co remediation and detection guidance.

6 published vulnerabilities

• CVE-2026-9776HIGH 7.5

  ATEN Unizon contains a directory traversal flaw that allows unauthenticated attackers to read sensitive files from the system. The vulnerability exists in a file-handling function that doesn't properly validate user-supplied file paths before accessing them. An attacker can exploit this over the network to retrieve files with SYSTEM-level privileges, potentially exposing passwords, configuration data, or other confidential information stored on the affected device.

• CVE-2026-9777HIGH 7.2

  ATEN Unizon contains a directory traversal vulnerability in its restoreDB functionality that allows authenticated users to bypass normal file access restrictions and execute arbitrary code with SYSTEM-level privileges. An attacker with valid credentials can craft a malicious file path that traverses the directory structure, allowing them to place and execute code outside of intended boundaries. This is a post-authentication attack, meaning the attacker must already have login access to the system.

• CVE-2026-9778HIGH 7.2

  A directory traversal vulnerability in ATEN Unizon's ImportDeviceList function allows authenticated attackers to execute arbitrary code with SYSTEM-level privileges. The vulnerability stems from insufficient validation of file paths before they are used in file operations, enabling an attacker to traverse the directory structure and load malicious code. While authentication is required to exploit this flaw, the ability to escalate from an authenticated user to SYSTEM-level code execution represents a significant post-authentication privilege escalation risk.

• CVE-2026-9779HIGH 7.2

  ATEN Unizon contains a vulnerability in its file update mechanism that fails to properly verify digital signatures on cryptographic operations. An authenticated attacker can exploit this flaw to execute arbitrary code with SYSTEM-level privileges on affected systems. While authentication is required, the ability to run code as SYSTEM makes this a high-severity issue for organizations relying on Unizon for secure file operations.

• CVE-2026-9774MEDIUM 6.5

  A directory traversal vulnerability in ATEN Unizon allows authenticated users with high-level privileges to delete arbitrary files on the system. The flaw exists in the updateLicense function, which fails to properly validate file paths before performing deletion operations. While authentication is required to exploit this issue, a compromised or malicious administrator account could use this to destroy critical system files, disable services, or trigger a denial-of-service condition.

• CVE-2026-9775MEDIUM 6.5

  ATEN Unizon contains a directory traversal vulnerability in its uploadSSL method that allows authenticated attackers to delete arbitrary files from the system. By bypassing path validation checks, an attacker with valid credentials can manipulate file paths to target and remove critical files, potentially disrupting system operations or triggering a denial-of-service condition.