EF
Vendor
EFM
13
CVEs
0
On KEV
0
New 30D
Products
IA9.8
ipTIME A8004T
EFM
4 CVEs0 on KEV0 new
IA10.0
ipTIME A3004T
EFM
2 CVEs0 on KEV0 new
IA9.8
iptime A6004MX
EFM
1 CVEs0 on KEV0 new
IA7.3
ipTIME AX8004M
EFM
1 CVEs0 on KEV0 new
IC7.2
ipTIME C200
EFM
1 CVEs0 on KEV0 new
IC9.1
ipTIME C200E
EFM
1 CVEs0 on KEV0 new
IN9.8
ipTIME NAS1dual
EFM
1 CVEs0 on KEV0 new
IT10.0
ipTIME T16000M
EFM
1 CVEs0 on KEV0 new
IT9.8
ipTIME T24000M
EFM
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90847 | IC ipTIME C200E EFM | 9.1 | Sep 15 | EFM ipTIME C200E System Setup iux_set.cgi os command injection |
| CVE-2026-78168 | IT ipTIME T24000M EFM | 9.8 | Aug 24 | EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication |
| CVE-2026-78167 | IT ipTIME T16000M EFM | 10.0 | Aug 24 | EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication |
| CVE-2026-19977 | IA ipTIME A3004T EFM | 10.0 | Aug 17 | EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication |
| CVE-2026-19379 | IA ipTIME AX8004M EFM | 7.3 | Aug 10 | EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection |
| CVE-2026-8234 | IA ipTIME A8004T EFM | 8.8 | May 10 | EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow |
| CVE-2026-7834 | IN ipTIME NAS1dual EFM | 9.8 | May 5 | EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow |
| CVE-2026-7833 | IC ipTIME C200 EFM | 7.2 | May 5 | EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection |
| CVE-2026-2550 | IA iptime A6004MX EFM | 9.8 | Feb 16 | EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload |
| CVE-2026-1742 | IA ipTIME A8004T EFM | 7.2 | Feb 2 | EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload |
| CVE-2026-1741 | IA ipTIME A8004T EFM | 6.6 | Feb 2 | EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor |
| CVE-2026-1740 | IA ipTIME A8004T EFM | 9.8 | Feb 2 | EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication |
| CVE-2025-14485 | IA ipTIME A3004T EFM | 5.0 | Dec 11 | EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection |