CVE-2026-78167: EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpconchecksessionurl of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What attacker access is required to exploit this issue?
The issue can be exploited remotely over the network. No privileges or user interaction are required.
Is there public exploit availability?
Yes. Public exploit information is available, so organizations should assume the flaw could be used in attacks.
Which version is identified as affected?
The reported affected product and version is EFM ipTIME T16000M 14.20.2.
Is a vendor fix or response available?
The available information states that the vendor was contacted early but did not respond. No patch, workaround, or mitigation is provided in the data.