CVE-2026-2550 | A vulnerability was found in EFM iptime A6004MX 14.18.2. Aff… | CVSS 9.8 CRITICAL

Description

A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID: CVE-2026-2550
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-02-15 16:12 UTC
Published: 2026-02-16 10:02 UTC
Last updated: 2026-02-23 10:08 UTC
Primary CWE: CWE-434
Unrestricted Upload
Vendor / Product: EFM / iptime A6004MX
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
EFM	iptime A6004MX	—	14.18.2

Weakness (CWE)

CWE	Source	Description
CWE-284	cna	Improper Access Controls
CWE-434	cna	Unrestricted Upload

CVSS scores (4)

Score	Severity	Version	Source	Vector
10.0	N/D	2.0	cna	AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R
9.8	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

References (4)

VDB-346159 | EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload https://vuldb.com/?id.346159
VDB-346159 | CTI Indicators (IOB, IOC, TTP, IOA) https://vuldb.com/?ctiid.346159
Submit #749986 | EFM iptime A6004MX 14.18.2 Authentication Bypass & Arbitrary File Upload leading to RCE https://vuldb.com/?submit.749986
https://github.com/LX-LX88/cve-new/issues/3