Threat Investigation
Request a demo

CVE-2026-24498

High

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects ipTIME T5008: through 15.26.8; ipTIME AX2004M: through 15.26.8; ipTIME AX3000Q: through 15.26.8; ipTIME AX6000M: through 15.26.8.

SeverityHigh
CVSS7.5
Exploit probability—
ProductIptime T5008 Firmware
PublishedFeb 27, 2026
First seenFeb 27, 2026
Weakness typeCWE-200Sensitive information exposure

How to fix

Update
  • iptime t5008_firmware15.27.2 or later
  • iptime ax2004m_firmware15.27.2 or later
  • iptime ax3000q_firmware15.27.2 or later
  • iptime ax6000m_firmware15.27.2 or later

Affected products

ProductAffected versionsFixed in
iptime t5008_firmwarev < 15.27.215.27.2
iptime ax2004m_firmwarev < 15.27.215.27.2
iptime ax3000q_firmwarev < 15.27.215.27.2
iptime ax6000m_firmwarev < 15.27.215.27.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.