Is CVE-2026-35906 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-35906 being exploited in the wild.

How severe is CVE-2026-35906?

Informational severity, published 4 June 2026.

Which products and versions are affected?

T3 Technology T625Pro v1.0.07; T3 Technology T6825G v1.0.03.

Is there a fix for CVE-2026-35906?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-35906 attacked?

It is attacked over the network.

Am I affected by CVE-2026-35906?

Check whether you run T3 Technology T625Pro or T3 Technology T6825G at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-35906: T3 Technology CPE remote code execution in debug CGI endpoint

CVE-2026-35906 · Severity: info · Published 2026-06-04

A security vulnerability exists in certain T3 Technology home routers and network equipment. An undocumented maintenance tool left in the device's software allows unauthorized individuals to take complete control of the router over the internet. This could lead to the theft of personal data, monitoring of internet traffic, or the use of the device in larger cyberattacks.

Technologies: T3 Technology T625Pro, T3 Technology T6825G. Vendors: T3 Technology.

Quick answers

Is CVE-2026-35906 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-35906 being exploited in the wild.
How severe is CVE-2026-35906?: Informational severity, published 4 June 2026.
Which products and versions are affected?: T3 Technology T625Pro v1.0.07; T3 Technology T6825G v1.0.03.
Is there a fix for CVE-2026-35906?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-35906 attacked?: It is attacked over the network.
Am I affected by CVE-2026-35906?: Check whether you run T3 Technology T625Pro or T3 Technology T6825G at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from an undocumented debug CGI endpoint present in the firmware of T3 Technology CPE models T625Pro (v1.0.07) and T6825G (v1.0.03). An unauthenticated attacker can exploit this by sending a specially crafted HTTP query string to the vulnerable endpoint. This results in arbitrary command execution with root privileges on the underlying operating system. The attack is reachable over the network without any prior authentication or user interaction. At the time of reporting, users are advised to check for firmware updates from their service providers.

Affected products

T3 Technology T625Pro v1.0.07
T3 Technology T6825G v1.0.03

Timeline

2026-06-04: disclosed: Initial disclosure of CVE-2026-35906
2026-06-04: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.