CVE-2026-19977: EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpconchecksessionurl of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19977?
CVE-2026-19977 has been rated as critical with a severity score of 10.
How do I fix CVE-2026-19977?
To address CVE-2026-19977, update the EFM ipTIME A3004T firmware to the latest version that resolves this vulnerability.
What kind of exploit does CVE-2026-19977 involve?
CVE-2026-19977 involves an improper authentication vulnerability that can be exploited remotely.
What components are affected by CVE-2026-19977?
CVE-2026-19977 affects the httpcon_check_session_url function within the Session Validation component.
Is the exploit for CVE-2026-19977 publicly available?
Yes, the exploit for CVE-2026-19977 has been made public, increasing the risk of remote exploitation.