A8004t Firmware vulnerabilities

2 known vulnerabilities in A8004t Firmware from Iptime. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  ipTIME A8004T: Unrestricted Upload of File with Dangerous Type

  CVE-2026-1742Feb 2, 2026EFM

  A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to l

• 9.8 Critical severity

  ipTIME A8004T: Improper Authentication

  CVE-2026-1740Feb 2, 2026EFM

  A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup Interface. The manipulation results in improper authentication. The attack may be