Welotec vulnerabilities

Products

• Tk100 6
• Tk500-v2 6
• Tk500-v3 6
• Tk515l 2
• Tk515l Set 2
• Tk515l-w 2
• Tk515l-w Set 2
• Tk525l 2
• Tk525l Set 2
• Tk525l-w 2
• Tk525l-w Set 2
• Tk525u 2
• Tk525u Set 2
• Tk525w 2
• Tk525w Set 2
• Tk535l1 2
• Tk535l1 Set 2

Newest

• welotec tk100, tk500-v2, tk500-v3 +2 more Buffer Overflow in Digital I/O CVE-2026-109161 6.9 MediumNovember 3, 2026
• welotec tk100, tk500-v2, tk500-v3 +2 more Command Injection in IPsec VPN CVE-2026-105982 8.6 HighNovember 3, 2026
• welotec tk100, tk500-v2, tk500-v3 +2 more Command Injection in Digital I/O CVE-2026-105981 8.6 HighNovember 3, 2026
• welotec tk100, tk500-v2, tk500-v3 +2 more Command Injection in WireGuard VPN CVE-2026-105980 8.6 HighNovember 3, 2026
• welotec tk100, tk500-v2, tk500-v3 +2 more Command Injection in ZeroTier VPN CVE-2026-105979 8.6 HighNovember 3, 2026
• welotec tk100, tk500-v2, tk500-v3 +2 more Command Injection in Management Control Functions CVE-2026-105978 8.6 HighNovember 3, 2026
• welotec smartems web application Path Traversal via 'Upload-Key' in SmartEMS Upload Handling CVE-2025-41714 8.8 HighSeptember 10, 2025
• welotec eg400mk2-d11001-000101, eg400mk2-d11101-000101, eg500mk2-a11001-000101 +22 more +24 more egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass CVE-2025-41702 9.8 CriticalAugust 26, 2025
• welotec smart ems, vpn security suite +1 more Welotec: Clickjacking Vulnerability in WebUI CVE-2024-3911 6.5 MediumApril 23, 2024
• welotec tk515l, tk515l set, tk515l-w +11 more +13 more Welotec: improper access control in TK500v1 router series CVE-2023-1083 9.8 CriticalApril 9, 2024
• welotec tk515l, tk515l set, tk515l-w +11 more +13 more Welotec: Command injection vulnerability in TK500v1 router series CVE-2023-1082 8.8 HighApril 9, 2024