CVE-2026-7193: Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
Published Sep 29, 2026
·Updated
A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service (port 23) using static credentials.
Affected Software
1 affected component
Shenzhen Dbit Network Equipment T-CPE301K 4G WiFi Mini Router
Event History
Sep 29, 2026
CVE Published
via MITRE·12:07 PM
Data Sourced
via MITRE·12:07 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be connected to the same network as the T-CPE301K router. They can then access its Telnet service on port 23 using static, predefined credentials.
2
What level of access could exploitation provide?
Successful use of the predefined Telnet credentials provides full root access to the device.
3
Which service should defenders review first?
Review whether Telnet is reachable on port 23 from networks where untrusted or unauthorized users may connect. The reported access path relies on the device's Telnet service.