CVE-2026-7192 - Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

Back Back to CVE browser

CRITICAL

Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

Published Sep 29, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.26%

Description

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do_cmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.

Affected products

Vendor Shenzhen Dbit Network Equipment Product T-CPE301K 4G Mini WiFi Router Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <29/09/2026

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Shenzhen Dbit Network Equipment

T-CPE301K 4G Mini WiFi Router

unaffected

Version	Status	Constraints
0	affected	<29/09/2026

Remediation

Vendor solution

No solution has been reported as yet.

Weaknesses (1)

CWE-121

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-88758		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-t-cpe301k-4g-mini-wifi-router-shenzhen-dbit		patch