Vulnerability · Published Feb 16, 2026 · Assigned by VulDB

CVE-2026-2550EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload

Critical 9.8

In plain English

A critical-severity unrestricted file upload in iptime A6004MX from EFM. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 45.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
EFM	iptime A6004MX	14.18.2

Weakness: CWE-434, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R

References

VDB-346159 | EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload vdb-entry, technical-description
VDB-346159 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #749986 | EFM iptime A6004MX 14.18.2 Authentication Bypass & Arbitrary File Upload leading to RCE third-party-advisory
https://github.com/LX-LX88/cve-new/issues/3 exploit, issue-tracking