Skip to content
OpenAdvisories

Vendor

EFM

18 known vulnerabilities.

Products

ipTIME A8004T 4 NAS1dual, NAS2dual, NAS4dual 2 ipTIME A3004T 2 ipTIME T24000M 1 ipTIME T16000M 1 ipTIME NAS1dual 1 ipTIME NAS product (NAS1, 2, 3, 4, 1dual, 2dual 4dual) 1 ipTIME NAS 1 ipTIME T5008 1 ipTIME AX2004M 1 ipTIME AX3000Q 1 ipTIME AX6000M 1 iptime A6004MX 1 ipTIME C200 1 ipTIME AX8004M 1 ipTIME C200E 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-90847 Public exploit

    EFM ipTIME C200E System Setup iux_set.cgi os command injection

    A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exp…

    EFM ipTIME C200E
  • Critical 9.8
    CVE-2026-78168

    EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

    A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed rem…

    EFM ipTIME T24000M
  • Critical 10.0
    CVE-2026-78167

    EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

    A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is po…

    EFM ipTIME T16000M
  • Critical 10.0
    CVE-2026-19977

    EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication

    A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is p…

    EFM ipTIME A3004T
  • Critical 9.8
    CVE-2026-7834

    EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

    A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The…

    EFM ipTIME NAS1dual
  • Critical 9.8
    CVE-2026-2550

    EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload

    A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made publi…

    EFM iptime A6004MX