Vulnerability · Published Nov 3, 2026 · Assigned by CERTVDE

CVE-2026-109161Buffer Overflow in Digital I/O

Medium 4.9

In plain English

A medium-severity buffer overflow in TK100 from Welotec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)0.3%top 77.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.

Affected products (as reported)

Vendor	Product	Versions
Welotec	TK100	0.0.0 – before 3.5.116
Welotec	TK500-v2	0.0.0 – before 1.0.124
Welotec	TK500-v3	0.0.0 – before 1.0.123

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References

https://www.certvde.com/en/advisories/VDE-2026-119/