CVE-2026-35904
A critical flaw in the web management interface of certain T3 Technology devices lets attackers enable Telnet without permission.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03.
Real-world impact
An attacker could enable Telnet, giving them a remote shell to the device and potentially full control over the network equipment.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network, requires no user interaction, and gives attackers complete confidentiality, integrity, and availability impact.
What to do about it
- ›Disable the Telnet service if it is not needed.
- ›Restrict access to the web management interface to trusted IP addresses or a VPN.
- ›Monitor logs for unauthorized attempts to enable Telnet.
- ›Apply any future vendor patch when released.
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
NVD description
Timeline
- Jun 4, 2026 · Jun 4, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 22, 2026 · 13d agoAdvisory updatedThe NVD record was last revised.