Vulnerability · Published Sep 29, 2026 · Assigned by INCIBE
CVE-2026-7193Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
High 8.6
In plain English
A high-severity hard-coded credentials in T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 4.0)8.6High
Exploit odds (30 days)0.2%top 86.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service (port 23) using static credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Shenzhen Dbit Network Equipment | T-CPE301K 4G Mini WiFi Router | 0 – before 29/09/2026 |
Weakness: CWE-798 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N