CVE-2026-7193CWE-798hardcoded-credentials

CVE-2026-7193

published September 29, 2026

CVSS
8.6
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service (port 23) using static credentials.

The record
Technical detail
CVSS
8.6 · NONE
CVSS v4.0
8.6 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00229 · 13.0th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-09-29T17:17Z
References (1)
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-t-cpe301k-4g-mini-wifi-router-shenzhen-dbit · [email protected]
EPSS history
Timeline
  • 01 OCT 03:49Z
    EPSS moved — → 0%
    epss
  • 29 SEP 12:07Z
    Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
    cvelistv5