Advisories · Technology

smartloli EFAK.

Every CVE that names smartloli EFAK among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111682 CVE record

CVSS 7.1 High

EFAK 5.0.0 through 5.1.0 Missing Authorization via /api/model-config Exposes API Keys
- smartloli EFAK
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-111681 CVE record

CVSS 8.7 High

EFAK through 5.1.0 Privilege Escalation via /api/users REST API
- smartloli EFAK
- Broken access control
Not analysed yet 16 Oct 2026