CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md
https://t3techgroup.com
https://www.ncsa.or.th
https://www.true.th/
https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md

Configurations

No configuration.

History

22 Jul 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Control de acceso incorrecto en la interfaz de gestión web de los modelos CPE de T3 Technology T625Pro v1.0.07, T6825G v1.0.03 y T7281 v1.0.03 permite a atacantes no autorizados habilitar el servicio Telnet mediante el envío de una solicitud manipulada a un componente CGI vulnerable.

08 Jun 2026, 15:16

Type	Values Removed	Values Added
References	~~() https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md -~~	() https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md -
CWE		CWE-284
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

04 Jun 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-04 15:16

Updated : 2026-07-22 20:10

NVD link : CVE-2026-35904

Mitre link : CVE-2026-35904

CVE.ORG link : CVE-2026-35904

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-35904", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35904", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-08T13:48:36.726326Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-04T15:16:50.550", "references": [{"url": "https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md", "source": "cve@mitre.org"}, {"url": "https://t3techgroup.com", "source": "cve@mitre.org"}, {"url": "https://www.ncsa.or.th", "source": "cve@mitre.org"}, {"url": "https://www.true.th/", "source": "cve@mitre.org"}, {"url": "https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35904.md", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component."}, {"lang": "es", "value": "Control de acceso incorrecto en la interfaz de gesti\u00f3n web de los modelos CPE de T3 Technology T625Pro v1.0.07, T6825G v1.0.03 y T7281 v1.0.03 permite a atacantes no autorizados habilitar el servicio Telnet mediante el env\u00edo de una solicitud manipulada a un componente CGI vulnerable."}], "lastModified": "2026-07-22T20:10:00.127", "sourceIdentifier": "cve@mitre.org"}