Welotec Tk500-V3
6 CVEs affecting Welotec Tk500-V3. Latest disclosed: 2026-11-03. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-105982 | High | 7.2 | 2026-11-03 | Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privi… |
CVE-2026-105981 | High | 7.2 | 2026-11-03 | Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them wit… |
CVE-2026-105980 | High | 7.2 | 2026-11-03 | Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root p… |
CVE-2026-105979 | High | 7.2 | 2026-11-03 | Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root pr… |
CVE-2026-105978 | High | 7.2 | 2026-11-03 | Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them… |
CVE-2026-109161 | Medium | 4.9 | 2026-11-03 | Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service. |