Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-7192

Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 29/09/2026
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do_cmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.

Affected versions

  • Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router

    fixed in 29/09/2026

References 1

incibe.es