What is CVE-2026-24498?

CVE-2026-24498 is a high-severity vulnerability in Efm-Networks, Inc. Iptime Ax2004m, classified under Information Disclosure. CVSS score: 7.5/10. Published 2026-02-27.

How severe is CVE-2026-24498?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Efm-Networks, Inc. Iptime Ax2004m

CVE-2026-24498

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects ipTIME T5008: through 15.26.8; ipTIME AX2004M: through 15.26.8; ipTIME AX3000Q: through 15.26.8; ipTIME AX6000M: through 15.26.8.

Vulnerability class: Information Disclosure

EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Efm-networks, Inc. Iptime Ax2004m — versions 0
Efm-networks, Inc. Iptime Ax3000q — versions 0
Efm-networks, Inc. Iptime Ax6000m — versions 0
Efm-networks, Inc. Iptime T5008 — versions 0
Iptime Ax2004m
Iptime Ax2004m_firmware
Iptime Ax3000q
Iptime Ax3000q_firmware
Iptime Ax6000m
Iptime Ax6000m_firmware

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

vuln@krcert.or.kr (Release Notes)
vuln@krcert.or.kr (Third Party Advisory)

Frequently asked questions

What is CVE-2026-24498?: CVE-2026-24498 is a high-severity vulnerability in Efm-Networks, Inc. Iptime Ax2004m, classified under Information Disclosure. CVSS score: 7.5/10. Published 2026-02-27.
How severe is CVE-2026-24498?: High severity. CVSS v3 base score is 7.5 out of 10.