Input Validation Flaw in Digital I/O Function of Vendor Product
CVE-2026-105981

8.6HIGH

Key Information:

Vendor

Welotec

Status
Tk100
Tk500-v2
Tk500-v3
Vendor
CVE Published:
3 November 2026

What is CVE-2026-105981?

An improper input validation vulnerability in the Digital I/O function of the affected product enables a remote attacker with elevated privileges to inject and execute operating system commands. This could lead to significant security risks as malicious actors gain control and manipulate system functions, potentially compromising the integrity and confidentiality of sensitive data.

Affected Version(s)

TK100 0.0.0 < 3.5.116

TK500-v2 0.0.0 < 1.0.124

TK500-v3 0.0.0 < 1.0.123

References

https://www.certvde.com/en/advisories/VDE-2026-119/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.