Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2026-84181 CVE-2026-105982 · GHSA-8mvm-3gqr-9wc8

Command injection in Welotec IPsec VPN

Priority MEDIUM 40

Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00466 Published 2026-11-03 Fixed in 3.5.116, 1.0.124 +1 CWE-77
TI-2026-84180 CVE-2026-105981 · GHSA-j6cj-3pf4-988r

Command Injection in Welotec Digital I/O

Priority LOW 39

Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00358 Published 2026-11-03 Fixed in 3.5.116, 1.0.124 +1 CWE-78
Priority LOW 39

Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00358 Published 2026-11-03 Fixed in 3.5.116, 1.0.124 +1 CWE-77
Priority LOW 37

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00358 Published 2026-11-03 Fixed in 3.5.116, 1.0.124 +1 CWE-77
Priority LOW 39

Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00358 Published 2026-11-03 Fixed in 3.5.116, 1.0.124 +1 CWE-78