TK500-v3 vulnerabilities
CVEs whose affected-version data names the TK500-v3 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-105981High· 7.2Command Injection in Digital I/O
Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
CVE-2026-105982High· 7.2Command Injection in IPsec VPN
Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-105980High· 7.2Command Injection in WireGuard VPN
Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-109161Medium· 4.9Buffer Overflow in Digital I/O
Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.
CVE-2026-105979High· 7.2Command Injection in ZeroTier VPN
Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-105978High· 7.2Command Injection in Management Control Functions
Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.