Welotec has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was November 2026 with 6. The median CVSS is 7.2 (high). None have a confirmed exploitation report. The most common weakness class is CWE-77 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Worst active — by depth score
CVE-2026-105982High· 7.2Command Injection in IPsec VPN40CVE-2026-105981High· 7.2Command Injection in Digital I/O40CVE-2026-105980High· 7.2Command Injection in WireGuard VPN40CVE-2026-105979High· 7.2Command Injection in ZeroTier VPN40CVE-2026-105978High· 7.2Command Injection in Management Control Functions40
Welotec vulnerabilities
CVEs affecting Welotec, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-105981High· 7.2Command Injection in Digital I/O
Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
CVE-2026-105982High· 7.2Command Injection in IPsec VPN
Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-105980High· 7.2Command Injection in WireGuard VPN
Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-109161Medium· 4.9Buffer Overflow in Digital I/O
Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.
CVE-2026-105979High· 7.2Command Injection in ZeroTier VPN
Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
CVE-2026-105978High· 7.2Command Injection in Management Control Functions
Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.