CVE-2026-18273

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

CVE-2026-18273

CVE-2026-18273 is a local privilege escalation vulnerability in the Kenwood DNR1007XR car audio/navigation unit. The root cause is incorrect default permissions on a directory used as the USB filesystem mount point , allowing a physically present attacker with low-privileged code execution to esc...

CVE-2026-18273 Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

EUVD-2026-63420

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged...

EUVD-2026-63419

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-18272

The Kenwood DNR1007XR's startUpdateProcess() function passes a user-supplied string directly to a system call without validation, enabling command injection as root. Exploitation requires physical access (CVSS 6.8 MEDIUM), and no firmware fix or workaround is currently available per ZDI-CAN-28981...

EUVD-2026-63418

Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specifi...

CVE-2026-18271

Kenwood DNR1007XR is affected by a heap-based buffer overflow in the vCardParser class. The root cause is the lack of proper validation of a user-supplied string before it is copied into a heap-allocated buffer. A physically present attacker can exploit this flaw without authentication to achieve...

CVE-2026-18270

Kenwood DNR1007XR devices are affected by a local privilege escalation vulnerability in the udhcpd service. The root cause is an incorrect permission assignment on a resource used by the service, allowing an attacker with low-privileged code execution to escalate to root . The CVSS 3.0 score is 7...

EUVD-2026-63417

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2026-18269

CVE-2026-18269 is an out-of-bounds write vulnerability in the tchdr_bytestream_read function of the Kenwood DNR1007XR car audio/navigation unit. The root cause is insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer. A physically present attacker can...

EUVD-2026-63416

Kenwood DNR1007XR tchdrbytestreamread Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specif...

CVE-2026-18268

Kenwood DNR1007XR is affected by a local privilege escalation vulnerability in the JKGenService component. The root cause is insufficient validation of a user-supplied string before it is passed to a system call, allowing an attacker with low-privileged local code execution to escalate to root an...

EUVD-2026-63415

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the targe...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-18267

The Kenwood DNR1007XR firmware update process fails to validate symbolic links, allowing a physically present, unauthenticated attacker to move files to arbitrary locations and execute code as root. No fixed version is available; affected versions are unspecified. Exploitation requires physical d...

PT-2026-65939

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description Physically present attackers can execute arbitrary code with root privileges on affected devices without requiring authentication. The issue occurs within the startUpdateProcess...

PT-2026-65936

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description An out-of-bounds write exists in the tchdr bytestream read function. This issue occurs because the software fails to properly validate user-supplied data, allowing a write operation...

PT-2026-65934

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description A flaw in the firmware update process allows a physically present attacker to execute arbitrary code with root privileges without requiring authentication. The issue occurs when the...

PT-2026-65937

Name of the Vulnerable Software and Affected Versions Kenwood DNR1007XR affected versions not specified Description A local privilege escalation flaw exists in the udhcpd service. The issue is caused by incorrect permission assignment on a resource used by the service. An attacker who has already...