CVE-2026-35905
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the 'superadmin' account.
Risk Assessment
Attackers who know this default password can gain full administrative access to the device, potentially leading to network compromise and traffic eavesdropping.
Recommendation
It is recommended to immediately change the default password for the 'superadmin' account to a strong, unique password and update the firmware if a patch is available.
Other vulnerabilities in T3 Technology CPE
See all- CVE-2026-35906Critical
An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07 and T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via a crafted HTTP query string.
- CVE-2026-35904Critical
Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via a crafted request to a vulnerable CGI component.
Original NVD description (English source)
T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS