Description
An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute arbitrary system commands as root via supplying a crafted HTTP query string.
Critical · 9.6
CVE-2026-35906
EUVD-2026-34276GHSA-9qwx-6gr4-xcgx
An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execute …
Published Jun 4, 2026 · Updated Jun 4, 2026 · Assigned by mitre