Vulnerabilities

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them…

Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Welotec

Product

TK100, TK500-v2, TK500-v3

CVSS v3.1

7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-77

Exposure class

Edge / VPN / firewall

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-105979 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 25
   CVE NVD 3h ago

   Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with…

   CVSS 7.2 CVE-2026-105982 Welotec
2. 37
   CVE NVD 3h ago

   Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them…

   CVSS 7.2 CVE-2026-105980 Welotec