CVE-2026-19977

Name of the Vulnerable Software and Affected Versions EFM ipTIME A3004T version 14.19.0

Description An issue exists in the Session Validation component where the httpcon check session url() function allows improper authentication through manipulation. This flaw enables remote exploitation.

Recommendations As a temporary workaround, consider restricting access to the httpcon check session url() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.