Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-17 | 6 | Disclosure3Exploit1General1PoC1 |
| 2026-08-19 | 1 | Patch1 |
[CVE] CVE-2026-19977 [HIGH PRIORITY] #EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authe... 🔗 https://exploitgrid.net/cve/CVE-2026-19977
Post summary
The post announces CVE‑2026‑19977 as high priority and links to an ExploitGrid page, suggesting a proof‑of‑concept is available, but it does not detail an active exploitation or provide patches.
🛡️ ExploitGrid Daily Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-19977 CVE-2024-13784 CVE-2026-15623 CVE-2026-19959 CVE-2026-19961 ..🧵👇
Post summary
A brief daily digest that lists several CVE identifiers without additional context or detail.
🔓 CVE-2026-19977: Critical 9.3 auth bypass in EFM ipTIME A3004T 14.19.0. httpcon_check_session_url fails session validation — no auth, network-accessible, full C/I/A impact. Update firmware now. #cybersecurity #vulnerabilities #ciso #msp #mssp https://secalerts.co/vulnerability/CVE-2026-19977?utm_campaign=x https://t.co/nA0bjDs8jK
Post summary
The tweet announces a high‑severity authentication bypass in ipTIME firmware and directly urges a firmware update, highlighting the need for a vendor patch.
🚨*CVE* CVE-2026-19977 A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Perform… https://www.cve.org/CVERecord?id=CVE-2026-19977 ----- Traducción: CVE-2026-19977 Se … https://infoflow.cloud`
Post summary
CVE‑2026‑19977 was identified in the EFM ipTIME A3004T firmware, affecting the httpcon_check_session_url component. No exploitable code, active attacks, or patch information are included.
CVE-2026-19977 A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Perform… https://www.cve.org/CVERecord?id=CVE-2026-19977
Post summary
The text announces a newly detected vulnerability in the EFM ipTIME A3004T firmware, specifying the affected session validation function.
CVE-2026-19977 Improper Authentication in EFM ipTIME A3004T Session Validation Due to Function Flaw https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19977
Post summary
A new CVE (CVE-2026-19977) affecting session validation in ipTIME A3004T routers via improper authentication is announced, with no PoC, exploit details, patch, or active exploitation reported.
🚨 EFM ipTIME A3004T — CVSS 10.0 CRITICAL CVE-2026-19977: Unauthenticated session validation bypass → Full router admin access → Public exploit available → https://threataft.com/articles/efm-iptime-a3004t-cve-2026-19977 #cybersecurity #infosec #ipTIME #RouterSecurity #CVSS10 #NoPatch #ThreatIntel
Post summary
The tweet announces a critical CVE (CVE‑2026‑19977) affecting the EFM ipTIME A3004T router and claims a public exploit is available, but no patch or mitigation is discussed.