All vulnerabilities
CVE-2026-7192

Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi RouterNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.26%Chance of exploitation activity in the next 30 days, higher than 16% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in29/09/2026Fixed versionCVE List
Published29 Sep 2026Updated 29 Sep 2026CVE List

What fixes it

  • 29/09/2026T-CPE301K 4G Mini WiFi RouterCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do_cmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.

Text from CVE List

Affected versions 1

  • T-CPE301K 4G Mini WiFi Routeraffected: all versions before 29/09/2026CVE List

References 1