TI-2026-01425 CVE-2026-1742 · GHSA-p784-4wwh-rmh6
EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload
Priority LOW 23
A vulnerability was identified in EFM ipTIME A8004T 14.18.2.
4 records
A vulnerability was identified in EFM ipTIME A8004T 14.18.2.
A vulnerability was determined in EFM ipTIME A8004T 14.18.2.
A vulnerability was found in EFM ipTIME A8004T 14.18.2.
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…