CVE-2026-78168

Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0

Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms.

Recommendations Update EFM ipTIME T24000M to a version later than 14.20.0. As a temporary mitigation, restrict access to the Session Validation Handler component.