Intrado 911 Emergency Gateway (EGW)

p a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-113-06.json" strong View CSAF /strong /a /p h2 Summary /h2 p strong Successful exploitation of this vulnerability could allow an attacker to read, modify, or delete files. /strong /p p The following versions of Intrado 911 Emergency Gateway (EGW) are affected: /p ul li Emergency Gateway 7.x (CVE-2026-6074) /li li Emergency Gateway 6.x (CVE-2026-6074) /li li Emergency Gateway 5.x (CVE-2026-6074) /li /ul div class="csaf-table" table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap thead tr th role="columnheader" data-tablesaw-priority="persist" CVSS /th th role="columnheader" Vendor /th th role="columnheader" Equipment /th th role="columnheader" Vulnerabilities /th /tr /thead tbody tr td v3 9.8 /td td Intrado /td td Intrado 911 Emergency Gateway (EGW) /td td Path Traversal: '.../...//' /td /tr /tbody /table /div h3 Background /h3 ul li strong Critical Infrastructure Sectors: /strong Emergency Services /li li strong Countries/Areas Deployed: /strong Worldwide /li li strong Company Headquarters Location: /strong United States /li /ul hr h2 Vulnerabilities /h2 div class="csaf-accordion" p a class="csaf-accordion-toggle-all" href="#" Expand All + /a /p div class="csaf-accordion-item" h3 a class="csaf-accordion-toggle" href="#" CVE-2026-6074 /a /h3 div class="csaf-accordion-content" p A path traversal condition in Intrado 911 Emergency Gateway could allow an attacker with existing network access the ability to access the EGW management interface without authentication. Successful exploitation of this vulnerability could allow a user to read, modify, or delete files. /p p a href="https://www.cve.org/CVERecord?id=CVE-2026-6074" View CVE Details /a /p hr h4 Affected Products /h4 h5 Intrado 911 Emergency Gateway (EGW) /h5 div class="ics-vendor-version-status" div class="ics-vendor" strong Vendor: /strong br Intrado /div div class="ics-version" strong Product Version: /strong br Intrado Emergency Gateway: 7.x, Intrado Emergency Gateway: 6.x, Intrado Emergency Gateway: 5.x /div div class="ics-status" strong Product Status: /strong br known_affected /div /div div class="ics-remediations" h6 Remediations /h6 p strong Mitigation /strong br Intrado developed and released a software update on March 2nd, 2026, that addresses this issue and has contacted customers to coordinate applying the patch. /p p strong Mitigation /strong br If you have questions, contact Intrado E911 Support: [email protected] br a href="mailto:[email protected]" mailto:[email protected] /a /p /div p strong Relevant CWE: /strong a href="https://cwe.mitre.org/data/definitions/35.html" CWE-35 Path Traversal: '.../...//' /a /p hr h4 Metrics /h4 div class="csaf-table csaf-metrics-table" table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap thead tr th role="columnheader" data-tablesaw-priority="persist" CVSS Version /th th role=