Read the docs

EFM

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

EFM records in CISA KEV

No EFM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Ax2004m Firmware · all components

Priority MEDIUM 55

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03736 Published 2026-01-20 No fix listed CWE-94
TI-2026-19746 CVE-2026-24498 · GHSA-cr8p-gx5g-wjgh

Information disclosure in EFM ipTIME T5008

Priority LOW 27

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00441 Published 2026-02-27 No fix listed CWE-200
Open these records in search →