Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-15 | 1 | General1 |
| 2026-02-16 | 5 | Disclosure4PoC1 |
| 2026-02-20 | 1 | Disclosure1 |
CVE-2026-2550 A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in un… https://www.cve.org/CVERecord?id=CVE-2026-2550
Post summary
The text announces a new CVE in the EFM iptime A6004MX device, noting the affected function and file, but offers no evidence of exploitation, PoC, or patch.
The severity is increased for this new vulnerability affecting EFM iptime A6004MX (CVE-2026-2550) https://vuldb.com/?id.346159
Post summary
Severity increased for CVE‑2026‑2550 on EFM iptime A6004MX; no further exploit, patch, or technical details provided.
CVE-2026-2550 (CVSS:8.9, CRITICAL) is Awaiting Analysis. A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file ..https://nvd.nist.gov/vuln/detail/CVE-2026-2550 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The text announces the discovery of CVE‑2026‑2550, a critical vulnerability in the commit_vpncli_file_upload function of the EFM iptime A6004MX firmware, with a CVSS score of 8.9 and no available patch or PoC yet.
🔴 CVE-2026-2550 - Critical A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. T... https://www.thehackerwire.com/vulnerability/CVE-2026-2550/ https://t.co/WyalVixlBJ
Post summary
A critical unrestricted upload vulnerability (CVE-2026-2550) was disclosed in the EFM iptime A6004MX firmware, enabling arbitrary file uploads via the commit_vpncli_file_upload function. No PoC or exploit details are provided.
[CVE-2026-2550: CRITICAL] Critical cyber security alert: Vulnerability in EFM iptime A6004MX 14.18.2 allows unrestricted file uploads via /cgi/timepro.cgi, making remote attacks possible. Public exploit availa...#cve,CVE-2026-2550,#cybersecurity https://cvefind.com/CVE-2026-2550
Post summary
CVE-2026-2550 is a critical vulnerability in EFM iptime A6004MX 14.0.2 that allows unrestricted file uploads via /cgi/timepro.cgi, potentially enabling remote attacks; a public exploit is available but no active exploitation or patch is mentioned.
🚨 Critical vuln in EFM iptime A6004MX (fw 14.18.2): CVE-2026-2550 allows unauthenticated file uploads — full device takeover possible! No patch yet. Restrict access & monitor now. https://radar.offseq.com/threat/cve-2026-2550-unrestricted-upload-in-efm-iptime-a6-a8baac0d #OffS... https://t.co/XcCo7EXfv1
Post summary
CVE-2026-2550 is a newly disclosed vulnerability in EFM iptime A6004MX firmware 14.18.2 that allows unauthenticated file uploads, enabling full device takeover; no patch has been released yet.
🚨 CRITICAL: CVE-2026-2550 hits EFM iptime A6004MX (14.18.2) — unrestricted remote file upload risk! Exploit public, vendor silent. Patch unavailable — isolate now! https://radar.offseq.com/threat/cve-2026-2550-unrestricted-upload-in-efm-iptime-a6-a8baac0d #OffSeq #Vulnerabilit... https://t.co/NX3wWyU0NS
Post summary
The tweet announces a critical remote file upload vulnerability (CVE-2026-2550) with a publicly available exploit and no patch, urging isolation.