Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-1742 A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of th… https://www.cve.org/CVERecord?id=CVE-2026-1742
Post summary
The text discloses CVE-2026-1742, noting the vulnerable function and file in ipTIME A8004T firmware, but provides no PoC, exploit code, or remediation details.
CVE-2026-1742 Remote File Upload Vulnerability in EFM ipTIME A8004T VPN Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1742 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces CVE-2026-1742, a remote file upload vulnerability in the EFM ipTIME A8004T VPN Service, and directs readers to additional details via provided links, but offers no further technical, exploit, or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | iptime | a8004t | - | - | - |
| OS | iptime | a8004t_firmware | 14.18.2 | - | - |