Critical severity · published Sep 29, 2026
CVE-2026-7192
Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
9.3
CVSS
0.3%
EPSS
No
On KEV
Description
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/do_cmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
T4
T-CPE301K 4G Mini WiFi Router · Shenzhen Dbit Network Equipment
before 29/09/2026 · source: vendor
Affected product
T4
T-CPE301K 4G Mini WiFi Router
Shenzhen Dbit Network Equipment
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-7192
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-7192
patch
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-t-cpe301k-4g-mini-wifi-router-shenzhen-dbit
More from T-CPE301K 4G Mini WiFi Router
8.6
CVE-2026-7193
Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment