LK3.9 vulnerabilities

2 known vulnerabilities in LK3.9 from Tinycontrol. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Lan Kontroler v3.5: Direct Request

  CVE-2025-15587Mar 16, 2026Tinycontrol

  Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resource inaccessible via a graphical interface. This issue has been fixed in firmware v

• 8.7 High severity

  Lan Kontroler v3.5: Insertion of Sensitive Information Into Sent Data

  CVE-2025-11500Mar 16, 2026Tinycontrol

  Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off (which is a default se