3
CVEs
2
Critical
1
High
0
KEV
3
PoC
3
Unpatched C/H
0.0%
Patch Rate
0.9%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (7)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-78167 | Remote authentication bypass in EFM ipTIME T16000M firmware 14.20.2 lets unauthenticated attackers defeat session validation via the httpcon_check_session_url function, gaining administrative access to the router's web management interface over the network. Publicly available exploit code exists (published via VulDB), and the CVSS 4.0 score of 9.3 reflects total loss of confidentiality, integrity, and availability. There is no public exploit identified in CISA KEV, but the vendor was contacted and did not respond, so affected devices currently have no fix. | CRITICAL | 9.3 | 1.0% | 68 |
PoC
No patch
|
| CVE-2026-19977 | Authentication bypass in EFM ipTIME A3004T (firmware 14.19.0) lets remote attackers defeat session validation through the httpcon_check_session_url function, granting unauthorized access to the router's web management interface. Publicly available exploit code exists, though the flaw is not yet listed in CISA KEV. The vendor was notified but did not respond, so no fix is currently available. | CRITICAL | 9.3 | 0.7% | 67 |
PoC
No patch
|
| CVE-2026-78168 | Authentication bypass in EFM ipTIME T24000M firmware through version 14.20.0 allows unauthenticated remote attackers to bypass session validation by manipulating the httpcon_check_session_url function in the Session Validation Handler. The flaw falls under CWE-287 (Improper Authentication) and grants unauthorized access to router management functions without valid credentials. A public proof-of-concept has been disclosed via GitHub, and the vendor has not responded to disclosure efforts, leaving no official patch available. | HIGH | 8.9 | 0.9% | 65 |
PoC
No patch
|