← Database

CVE-2026-35906

CRITICAL CVSS: 9.6 Published: 2026-06-04 Modified: 2026-07-22

Description

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HTTP query string.

Affected Platforms

Unknown

Weakness Type

CWE-78

References