Lk4 (Tinycontrol) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-03-16. Vendor: Tinycontrol.

CVEs of Lk4

• CVE-2025-15587 - CVSS 8.6 (high), 2026-03-16: Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly…
• CVE-2025-11500 - CVSS 8.7 (high), 2026-03-16: Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management…