TI-2026-54364 CVE-2026-78167 · GHSA-2hpc-g37m-pmw5
EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
Priority HIGH 82
A weakness has been identified in EFM ipTIME T16000M 14.20.2.
EFM
Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
EFM records in CISA KEVNo EFM vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
23 records
TI-2026-16198 CVE-2026-19977 · GHSA-6h4w-hx37-cqg3
EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication
Priority HIGH 82
A vulnerability was detected in EFM ipTIME A3004T 14.19.0.
TI-2026-54365 CVE-2026-78168 · GHSA-r2qf-9984-83jj
EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication
Priority HIGH 81
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0.
TI-2026-06893 CVE-2026-7834 · GHSA-c384-mhv7-jvfr
EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow
Priority HIGH 81
A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24.
TI-2026-02176 CVE-2026-2550 · GHSA-xj75-c4vf-wp8x
EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload
Priority HIGH 81
A vulnerability was found in EFM iptime A6004MX 14.18.2.
TI-2026-61742 CVE-2026-90847 · GHSA-7cwj-49q5-wgwg
EFM ipTIME C200E System Setup iux_set.cgi os command injection
Priority HIGH 76
A vulnerability was determined in EFM ipTIME C200E 1.094.
TI-2026-07255 CVE-2026-8234 · GHSA-hhfg-q3j6-485j
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow
Priority HIGH 73
A security vulnerability has been detected in EFM ipTIME A8004T 14.18.2.
TI-2026-06892 CVE-2026-7833 · GHSA-m3xj-gqh8-33xm
EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection
Priority HIGH 72
A weakness has been identified in EFM ipTIME C200 up to 1.092.
TI-2026-15813 CVE-2026-19379 · GHSA-6hpq-m5gp-6p39
EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection
Priority HIGH 70
A vulnerability was determined in EFM ipTIME AX8004M 15.09.0.
TI-2025-32135 CVE-2025-50464 · GHSA-rp2x-xfx4-4r2g
A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS…
Priority HIGH 68
A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04.
TI-2025-35008 CVE-2025-55423 · GHSA-495m-v35r-f849
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME…
Priority MEDIUM 55
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…
TI-2021-08332 CVE-2021-26614 · GHSA-92m5-7gm4-grc4
IpTime C200 IP camera remote code execution vulnerability
Priority MEDIUM 47
ius_get.cgi in IpTime C200 camera allows remote code execution.
TI-2020-06383 CVE-2020-7879 · GHSA-54vf-jrm9-p98w
ipTIME C200 IP Camera command injection vulnerability
Priority MEDIUM 45
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS.
TI-2022-07807 CVE-2022-23771 · GHSA-whc8-p8h6-gp94
IPTIME NAS1DUAL CSRF Vulnerability
Priority MEDIUM 40
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products.
TI-2022-07801 CVE-2022-23765 · GHSA-qhhg-q8wp-jjvj
IPTIME NAS family CSRF vulnerability
Priority LOW 39
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS.
TI-2026-01423 CVE-2026-1740 · GHSA-33w6-9gm9-5rj4
EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication
Priority LOW 37
A vulnerability was found in EFM ipTIME A8004T 14.18.2.
TI-2020-06356 CVE-2020-7848 · GHSA-vmm9-vj5p-8xc9
Improper input validation in EFM ipTIME C200 IP Camera
Priority LOW 37
The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script.
TI-2026-01424 CVE-2026-1741 · GHSA-p6m8-4rxr-8v7p
EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor
Priority LOW 36
A vulnerability was determined in EFM ipTIME A8004T 14.18.2.
TI-2021-08338 CVE-2021-26620 · GHSA-cc72-grgq-wvmx
IPTIME NAS2dual improper authentication vulnerability
Priority LOW 36
An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual.
TI-2020-06355 CVE-2020-7847 · GHSA-vwm9-4mjh-m96x
Unrestricted file upload in EFM ipTIME NAS
Priority LOW 35
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.
TI-2026-19746 CVE-2026-24498 · GHSA-cr8p-gx5g-wjgh
Information disclosure in EFM ipTIME T5008
Priority LOW 27
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.
TI-2026-01425 CVE-2026-1742 · GHSA-p784-4wwh-rmh6
EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload
Priority LOW 23
A vulnerability was identified in EFM ipTIME A8004T 14.18.2.
TI-2025-13228 CVE-2025-14485 · GHSA-mrhv-3wcw-74fh
EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection
Priority LOW 16
A weakness has been identified in EFM ipTIME A3004T 14.19.0.