← Volver al buscador de CVEs

CVE-2026-35906

T3 Technology CPE

Descripción

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HTTP query string.

CVSS 9.6EPSS 0.466%Riesgo 1
Ver fuente
Publicación
2026-06-04 15:16:50
Versiones afectadas
<=1.0.07
Tipo
Firmware
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H