Vendors / EFM Records 23 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 9 CVSS 9.0–10.0
CVSS high 8 CVSS 7.0–8.9
Exploited now EFM records in CISA KEV No EFM vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03736 · Published 2026-01-20 · No fix listed CWE-94
Priority LOW 27
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.
CVSS 4.0 MEDIUM 6.0· Adjacent network · No auth · No interaction · EPSS 0.00441 · Published 2026-02-27 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical9 High8 Medium5 Low1 No CVSS0