Vulnerability · Published Jun 9, 2026 · Assigned by certcc
CVE-2026-10045CVE-2026-10045
Critical 9.8
In plain English
A critical-severity security flaw in DR300 from Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.2%top 88.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, inspect active connections, and view currently connected devices.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd | DR300 | 2.1.2.121 |