EFM vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202612

Newest CVEs

• CVE-2026-90847

  EFM ipTIME C200E System Setup iux_set.cgi os command injection

  EFM · ipTIME C200E

  Critical9.4
• CVE-2026-78168

  EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

  EFM · ipTIME T24000M

  Critical9.3
• CVE-2026-78167

  EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

  EFM · ipTIME T16000M

  Critical10.0
• CVE-2026-19977

  EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication

  EFM · ipTIME A3004T

  Critical10.0
• CVE-2026-19379

  EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

  EFM · ipTIME AX8004M

  Medium6.9
• CVE-2026-8234

  EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow

  EFM · ipTIME A8004T

  High8.7
• CVE-2026-7834

  EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

  EFM · ipTIME NAS1dual

  Critical9.3
• CVE-2026-7833

  EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

  EFM · ipTIME C200

  High8.6
• CVE-2026-2550

  EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload

  EFM · iptime A6004MX

  Critical9.3
• CVE-2026-1742

  EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload

  EFM · ipTIME A8004T

  Medium5.1