CVE-2026-18267CWE-59

CVE-2026-18267

Medium · published August 20, 2026

CVSS v3.0
6.8
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the firmware update process. By creating a symbolic link, an attacker can abuse the service to move a file to an arbitrary location. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28751.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-08-20T21:17Z
References (2)
https://www.kenwood.com/cs/ce/mm/firmware/2020/2020f/eng.html · [email protected]https://www.zerodayinitiative.com/advisories/ZDI-26-484/ · [email protected]
EPSS history
Timeline
  • 20 AUG 16:13Z
    Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
    cvelistv5