Skip to content

CVE record · 1 source

CVE-2026-105979

CVSS 7.2

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them…

Vendor: Welotec
Product: TK100, TK500-v2, TK500-v3
CVSS v3.1: 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-77
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

37

CVE NVD 3h ago

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them…

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

CVSS 7.2 CVE-2026-105979 Welotec