Log in Start free

EFM

Products

ProductCVEsExploitedLatest
ipTIME A8004T4–May 10, 2026
ipTIME A3004T2–Aug 17, 2026
ipTIME AX8004M1–Aug 10, 2026
ipTIME C2001–May 5, 2026
ipTIME C200E1–Sep 15, 2026
ipTIME NAS1dual1–May 5, 2026
ipTIME T16000M1–Aug 24, 2026
ipTIME T24000M1–Aug 24, 2026
iptime A6004MX1–Feb 16, 2026

Exploited and recent CVEs

  • CVE-2026-90847 Critical 9.1 EFM ipTIME C200E System Setup iux_set.cgi os command injection 3.4%
  • CVE-2026-78168 Critical 9.8 EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication 1.3%
  • CVE-2026-78167 Critical 10.0 EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication 1.5%
  • CVE-2026-19977 Critical 10.0 EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication 1.3%
  • CVE-2026-19379 High 7.3 EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection 2.0%
  • CVE-2026-8234 High 8.8 EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow 0.5%
  • CVE-2026-7834 Critical 9.8 EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow 0.6%
  • CVE-2026-7833 High 7.2 EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection 3.2%
  • CVE-2026-2550 Critical 9.8 EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload 0.7%
  • CVE-2026-1742 Medium 4.7 EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload 0.4%
  • CVE-2026-1741 Medium 6.6 EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor 0.8%
  • CVE-2026-1740 High 7.3 EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication 0.5%
  • CVE-2025-14485 Medium 5.0 EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection 1.8%