Is CVE-2026-35904 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35904 being exploited in the wild.

How severe is CVE-2026-35904?

Informational severity, with a CVSS score of 4.3, published 4 June 2026.

Which products and versions are affected?

T3 Technology T625Pro v1.0.07; T3 Technology T628 Suspected affected due to shared codebase; T3 Technology T628L Suspected affected due to shared codebase; T3 Technology T6825G v1.0.03; and 1 more.

Is there a fix for CVE-2026-35904?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-35904 attacked?

It is attacked from the adjacent network or over the network, in a network appliance.

Am I affected by CVE-2026-35904?

Check whether you run T3 Technology T625Pro, T3 Technology T628, T3 Technology T628L or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35904: T3 Technology CPE missing authentication in telnetenable.cgi

CVE-2026-35904 · Severity: info · CVSS 4.3 · Published 2026-06-04

A security vulnerability exists in several T3 Technology home internet routers (CPE models). An unauthorized person on the same network can remotely enable the Telnet service, which is a tool used for administrative access. While this does not directly steal data, it opens a doorway for attackers to attempt further unauthorized access to the device's management systems.

Technologies: T3 Technology T625Pro, T3 Technology T6825G. Vendors: T3 Technology.

Quick answers

Is CVE-2026-35904 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35904 being exploited in the wild.
How severe is CVE-2026-35904?: Informational severity, with a CVSS score of 4.3, published 4 June 2026.
Which products and versions are affected?: T3 Technology T625Pro v1.0.07; T3 Technology T628 Suspected affected due to shared codebase; T3 Technology T628L Suspected affected due to shared codebase; T3 Technology T6825G v1.0.03; and 1 more.
Is there a fix for CVE-2026-35904?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-35904 attacked?: It is attacked from the adjacent network or over the network, in a network appliance.
Am I affected by CVE-2026-35904?: Check whether you run T3 Technology T625Pro, T3 Technology T628, T3 Technology T628L or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authentication vulnerability (CWE-306) exists in the /cgi-bin/telnetenable.cgi component of T3 Technology CPE devices. The endpoint fails to validate sessions or authenticate requests; when called with the parameter 'telnetenable=1', the device adds an iptables/ebtables ACCEPT rule for TCP port 23 on the LAN bridge (br0) and launches the telnetd daemon. While the endpoint does not allow direct command execution, it significantly increases the attack surface by exposing the Telnet service to the local network. This can be exploited by an adjacent attacker via a direct GET request or by a remote attacker via a Blind Cross-Site Request Forgery (CSRF) attack.

Affected products

T3 Technology T625Pro v1.0.07
T3 Technology T6825G v1.0.03
T3 Technology T7281 v1.0.03
T3 Technology T628 Suspected affected due to shared codebase
T3 Technology T628L Suspected affected due to shared codebase

Timeline

2026-06-04: disclosed: Initial advisory published by PwnOnu and MITRE

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.