Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2026-105979

Command Injection in ZeroTier VPN

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2026-109161

Buffer Overflow in Digital I/O

Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2026-105978

Command Injection in Management Control Functions

Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2026-105981

Command Injection in Digital I/O

Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2026-105982

Command Injection in IPsec VPN

Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2026-105980

Command Injection in WireGuard VPN

Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk100 Tk500 V2 Tk500 V3
CVE-2025-41714

Path Traversal via 'Upload-Key' in SmartEMS Upload Handling

The upload endpoint insufficiently validates the 'Upload-Key' request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Smartems
CVE-2025-41702

egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Egos Webgui
CVE-2023-1083

Welotec: improper access control in TK500v1 router series

An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Welotec
Products
Tk515l Tk525l Tk525u and 2 more