PatchTheCVEtdc-x401gl firmware vulnerabilities and fixes
Recent CVEs affecting tdc-x401gl firmware, with upgrade or downgrade steps. 13 tracked.
Also searched as: tdc x401gl firmware, tdc-x401glfirmware.
tdc-x401gl firmware has 13 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-15. Highest priority: CVE-2026-22908 (score 44/100).
- CVE-2026-22919 LOW 3.8 UPGRADE An attacker with administrative access may inject malicious content into the login page, potentially enabling
- CVE-2026-22918 MEDIUM 4.3 MITIGATE An attacker may exploit missing protection against clickjacking by tricking users into performing unintended a
- CVE-2026-22917 MEDIUM 4.3 UPGRADE Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of se
- CVE-2026-22916 MEDIUM 4.3 MITIGATE An attacker with low privileges may be able to trigger critical system functions such as reboot or factory res
- CVE-2026-22915 MEDIUM 4.3 MITIGATE An attacker with low privileges may be able to read files from specific directories on the device, potentially
- CVE-2026-22914 MEDIUM 4.3 MITIGATE An attacker with limited permissions may still be able to write files to specific locations on the device, pot
- CVE-2026-22913 MEDIUM 4.3 UPGRADE Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login
- CVE-2026-22912 MEDIUM 4.3 UPGRADE Improper validation of a login parameter may allow attackers to redirect users to malicious websites after aut
- CVE-2026-22911 MEDIUM 5.3 MITIGATE Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to r
- CVE-2026-22910 HIGH 7.5 MITIGATE The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasi
- CVE-2026-22909 HIGH 7.5 MITIGATE Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or d
- CVE-2026-22908 CRITICAL 9.1 UPGRADE Uploading unvalidated container images may allow remote attackers to gain full access to the system, potential
- CVE-2026-22907 CRITICAL 9.9 UPGRADE An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify
FAQ
How do I fix tdc-x401gl firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tdc-x401gl firmware being exploited right now?
None of the tracked tdc-x401gl firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tdc-x401gl firmware CVE should I patch first?
CVE-2026-22908 currently ranks highest (44/100): Uploading unvalidated container images may allow remote attackers to gain full access to the system, potential.