Vendors and CVEs › Vendors › Welotec
Welotec: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name Welotec, from Friday 30 October 2026 to Wednesday 4 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Welotec TK routers have flaws that could give an attacker full control
Several flaws in the web management functions of Welotec routers, including VPN-related functions, let a remote attacker with high privileges inject commands or cause a buffer overflow.
High
Welotec SMART EMS PHP flaws allow remote code execution without login
Two memory-safety flaws in the PHP runtime bundled with SMART EMS let an unauthenticated remote attacker run arbitrary code in the PHP web worker.