Is CVE-2026-18270 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-18270 being exploited in the wild.

How severe is CVE-2026-18270?

High severity, with a CVSS score of 7.8, published 20 August 2026.

Which products and versions are affected?

Kenwood DNR1007XR prior to firmware version 2.0.0003.

Is there a fix for CVE-2026-18270?

A patch was published on 2026-07-21: Firmware update released addressing the vulnerability Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-18270 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-18270?

Check whether you run Kenwood DNR1007XR at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-18270: Kenwood DNR1007XR udhcpd privilege escalation via incorrect permissions

CVE-2026-18270 · Severity: high · CVSS 7.8 · Published 2026-08-20

The Kenwood DNR1007XR is a navigation and multimedia receiver for vehicles. A flaw in the udhcpd service (which manages DHCP network configuration) has incorrect file or directory permissions that allow a local attacker with low-privilege access to escalate to root, potentially enabling complete control over the device and access to sensitive navigation data or vehicle systems.

Technologies: Kenwood DNR1007XR. Vendors: Kenwood.

Quick answers

Is CVE-2026-18270 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-18270 being exploited in the wild.
How severe is CVE-2026-18270?: High severity, with a CVSS score of 7.8, published 20 August 2026.
Which products and versions are affected?: Kenwood DNR1007XR prior to firmware version 2.0.0003.
Is there a fix for CVE-2026-18270?: A patch was published on 2026-07-21: Firmware update released addressing the vulnerability Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-18270 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-18270?: Check whether you run Kenwood DNR1007XR at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is an incorrect permission assignment flaw in the udhcpd service running on Kenwood DNR1007XR devices. The service fails to properly restrict access to a resource (likely a file or directory), allowing a local attacker with low-privilege code execution to escalate privileges to root. The attack vector is local-only and requires the attacker to already have the ability to execute code on the system with a low privilege level. Exploitation results in full code execution in the root context, compromising device integrity and confidentiality. Kenwood released a firmware update (version 2.0.0003 published 2026-07-21) to address this vulnerability.

Affected products

Kenwood DNR1007XR prior to firmware version 2.0.0003

Timeline

2026-02-03: disclosed: Vulnerability reported to Kenwood by Slow Horses of Qrious Secure
2026-07-21: patched: Firmware update released addressing the vulnerability
2026-07-29: advisory: ZDI-26-487 / ZDI-CAN-29111 coordinated public disclosure

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.