CVE-2026-7192: Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
Published Sep 29, 2026
·Updated
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long parameter, which overwrites the PC and RA registers.
Affected Software
1 affected component
Shenzhen Dbit Network Equipment T-CPE301K 4G WiFi Mini WiFi Router
Event History
Sep 29, 2026
CVE Published
via MITRE·12:08 PM
Data Sourced
via MITRE·12:08 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the router's HTTP interface. Exploitation uses a manipulated HTTP POST request to /js/common/do_cmd.js with an excessively long parameter.
2
What is the expected impact of successful exploitation?
Successful exploitation can cause a denial of service and reboot the device. The overflow overwrites the PC and RA registers.