# CVE-2026-35905: T3 Technology CPE hardcoded root password in superadmin account

Source: https://junglewise.ai/threats/cve-2026-35905-t3-technology-cpe-hardcoded-root-password-in-superadmin-account  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-04. Updated: 2026-06-04  
License: CC BY 4.0 with a link back

CVE-2026-35905 · Severity: info · CVSS 8.8 · Published 2026-06-04

Multiple T3 Technology home internet routers (CPE) contain a permanent, unchangeable administrative password. This allows anyone with access to the local network to log in as a 'superadmin' with full control over the device. An attacker could use this access to monitor internet traffic, change network settings, or disable the device entirely.

Technologies: [T3 Technology T625Pro](https://junglewise.ai/threats/technologies/t625pro), [T3 Technology T6825G](https://junglewise.ai/threats/technologies/t6825g). Vendors: [T3 Technology](https://junglewise.ai/threats/vendors/t3-technology).

## Quick answers

**Is CVE-2026-35905 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-35905 being exploited in the wild.

**How severe is CVE-2026-35905?** Informational severity, with a CVSS score of 8.8, published 4 June 2026.

**Which products and versions are affected?** T3 Technology T625Pro v1.0.07; T3 Technology T6825G v1.0.03; T3 Technology T7281 v1.0.03.

**Is there a fix for CVE-2026-35905?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-35905 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-35905?** Check whether you run T3 Technology T625Pro, T3 Technology T6825G or T3 Technology T7281 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A hardcoded credentials vulnerability (CWE-798) exists in the firmware of T3 Technology CPE models T625Pro (v1.0.07), T6825G (v1.0.03), and T7281 (v1.0.03). The 'superadmin' account uses a static password ('t4246#5753') that is identical across all units and cannot be modified by the user. This account provides root-level access via Telnet and the web management interface. An attacker on the adjacent network (e.g., local Wi-Fi or LAN) can exploit this to gain complete administrative control of the device. The vulnerability is suspected to affect other models using the same SDK, such as the T628 and T628L.

## Affected products

- T3 Technology T625Pro v1.0.07
- T3 Technology T6825G v1.0.03
- T3 Technology T7281 v1.0.03

## Timeline

- 2026-06-04: disclosed: Initial disclosure via GitHub and NVD

## References

- [https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35905.md](https://github.com/PwnOnu/T3-Technology-CPE-Advisories/blob/main/CVE-2026-35905.md)
- [https://t3techgroup.com/](https://t3techgroup.com/)
- [https://www.ncsa.or.th/](https://www.ncsa.or.th/)
- [https://www.true.th/](https://www.true.th/)

## Related threats

- [T3 Technology CPE remote code execution in debug CGI endpoint](https://junglewise.ai/threats/cve-2026-35906-t3-technology-cpe-remote-code-execution-in-debug-cgi-endpoint)
- [T3 Technology CPE missing authentication in telnetenable.cgi](https://junglewise.ai/threats/cve-2026-35904-t3-technology-cpe-missing-authentication-in-telnetenable-cgi)