TI-2026-19746 CVE-2026-24498 · GHSA-cr8p-gx5g-wjgh
Information disclosure in EFM ipTIME T5008
Priority LOW 27
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.
2 records
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…