CVE-2026-78168 | EFM ipTIME T24000M up to 14.20.0 Session Validation httpcon_check_session_url improper authentication

August 23, 2026 Yanac

A vulnerability categorized as critical has been discovered in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-78168. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More