CVE-2026-35904
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via a crafted request to a vulnerable CGI component.
Risk Assessment
This allows unauthorized remote access to the device with full privileges, potentially leading to complete compromise of the network hardware.
Recommendation
Update the firmware to a version that fixes this vulnerability, or apply firewall rules to block unauthorized access to the management interface.
Original NVD description (English source)
Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component.