https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1742.htmlhttps://patchthecve.com/cve/CVE-2026-1742.htmlWed, 17 Jun 2026 10:16:26 +0000MEDIUM 4.7: A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit ihttps://patchthecve.com/cve/CVE-2026-1741.htmlhttps://patchthecve.com/cve/CVE-2026-1741.htmlWed, 17 Jun 2026 10:16:26 +0000MEDIUM 6.6: A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component Debug Interface. This manipulation of the argument cmd causes backdoor. It is possible to initiate the attack remotely. The complexity of an athttps://patchthecve.com/cve/CVE-2026-1740.htmlhttps://patchthecve.com/cve/CVE-2026-1740.htmlWed, 17 Jun 2026 10:16:25 +0000HIGH 7.3: A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup Interface. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has b