Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-24 | 3 | Disclosure1General1PoC1 |
| 2026-08-30 | 1 | PoC1 |
| 2026-09-04 | 1 | Active Exploitation1 |
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-78167 CVE-2026-78155 CVE-2026-78211 CVE-2026-78169 CVE-2026-5388 ..🧵👇
Post summary
The tweet lists five CVE identifiers but contains no further insight into the vulnerabilities, exploits, or mitigations.
⚡ Consumer Router Flaws: Exploits in the Wild, No Fixes SOHO router vulnerabilities continue to pile up with no remediation in sight. CVE-2026-78167 (CVSS 10.0) targets EFM ipTIME T16000M 14.20.2, exploiting the…
Post summary
CVE‑2026‑78167 is being exploited in the wild against ipTIME T16000M routers, with no patch available—posing a critical, unmitigated risk.
[CVE] CVE-2026-78167 [HIGH PRIORITY] #EFM ipTIME T16000M Session Validation httpcon_check_session_url improper auth... 🔗 https://exploitgrid.net/cve/CVE-2026-78167
Post summary
The tweet links to an exploitgrid page for CVE-2026-78167, signaling that a proof‑of‑concept exists for an authentication bypass in the ipTIME T16000M; no evidence of active exploitation or patching is provided.
PoC exists 🔓 CVE-2026-78167: EFM ipTIME T16000M 14.20.2 has a critical (9.3) auth bypass in httpcon_check_session_url — no creds, no interaction, full C/I/A impact. Check your network gear. #cybersecurity #vulnerabilities #ciso #mssp https://secalerts.co/vulnerability/CVE-2026-78167?utm_campaign=x https://t.co/JLGivxu476
Post summary
A proof‑of‑concept demonstrates a critical authentication bypass in httpcon_check_session_url, with full confidentiality, integrity, and availability impact, but no exploit tools or patch details are provided.
CVE-2026-78167 Improper Authentication in EFM ipTIME T16000M Session Validation ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-78167 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces CVE‑2026‑78167 as an improper authentication flaw in EFM ipTIME T16000M, providing a link to a vulnerability details page without mentioning exploits, patches, or active exploitation.