CVE-2026-19977
Last modified
CVE-2026-19977 is a critical-severity vulnerability rated 10/10 on the CVSS scale. A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| EFM | ipTIME A3004T | 14.19.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-19977?
How severe is CVE-2026-19977?
How do I fix CVE-2026-19977?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-19971A flaw has been found in LB-Link WR1210M 1.0.3. This impacts…4.7
- CVE-2026-19972A vulnerability has been found in itsourcecode Hospital Mana…6.3
- CVE-2026-19973A vulnerability was found in itsourcecode Hospital Managemen…6.3
- CVE-2026-19974A security flaw has been discovered in treefrogframework tre…5.6
- CVE-2026-19975A weakness has been identified in Azuriom CMS up to 1.2.12. …3.1
- CVE-2026-19976A security vulnerability has been detected in COMFAST CF-N1-…6.6
- CVE-2026-19978A flaw has been found in jiantao88 android-mcp-server up to …5.3
- CVE-2026-19979A vulnerability was identified in GL.iNet A1300, AX1800, AXT…8.3
- CVE-2026-1998A flaw has been found in micropython up to 1.27.0. This vuln…5.5
- CVE-2026-19980A security flaw has been discovered in GL.iNet A1300, AX1800…7.4
- CVE-2026-19981A weakness has been identified in GL.iNet A1300, AX1800, AXT…7.4
- CVE-2026-19982A security vulnerability has been detected in GL.iNet BE9300…7.4
Are you affected by CVE-2026-19977?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST