PT-2026-102522

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

CVE-2026-7193: Use of Hard-coded Credentials

A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root access to the device via the Telnet service port 23 using static credentials...

VulnCheck KEV: CVE-2025-9090

A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the Less viewer search and display-filter matching in builtins/src/main/java/org/jline/builtins/Less.java. An attacker can hang the session thread by supplying a malicious search or filter...

CVE-2026-47116

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

CVE-2026-47116

The LTSecurity LTK3500SF device is vulnerable to a hard-coded credentials flaw where the passwords for the root and guest accounts are stored as reversible hashes within the /etc/shadow file. An attacker can use dictionary-based cracking tools to recover these credentials, subsequently allowing f...

CVE-2026-47116 LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

CVE-2026-47116: Use of Hard-coded Credentials

LTSecurity LTK3500SF contains a hard-coded credentials vulnerability where the root and guest account passwords are stored in /etc/shadow as weak hashes recoverable with dictionary-based cracking tools. The recovered credentials authenticate against the device's Telnet and SSH services and grant...

PT-2026-96969

Name of the Vulnerable Software and Affected Versions LTSecurity LTK3500SF affected versions not specified Description The device contains hard-coded credentials where the root and guest account passwords are stored in the /etc/shadow file as weak hashes. These hashes can be recovered using...

PT-2026-96806

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.3 SLC9000 versions prior to 9.7.0.2 EMG8500/EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified Description A server-side request forgery SSRF issue exists in the WebSSH/WebTelnet listener...

cowrie v3.0.14

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

Astra Linux – Vulnerability in curl

In versions 7.7 through 7.76.1 of curl, there is an information disclosure issue when the -t command-line option, referred to as CURLOPTTELNETOPTIONS in libcurl, is used to send variable=content pairs to TELNET servers. This issue arises due to a flaw in the option parser for sending NEWENV...

Telnet Client Code Execution

The vulnerability of the Telnet Client command-line tool for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

K000163275: Curl vulnerabilities CVE-2023-27533, CVE-2023-28319, CVE-2023-28320, and CVE-2023-38039

Security Advisory Description CVE-2023-27533 A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allo...

CVE-2026-52482

An issue in the SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information. The vulnerability occurs via the inetd service, which spawns /app/sh_for_telnet , enabling an unauthenticated root shell via Telnet on port 23. Exploitation details for this spe...

PT-2026-89123

An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh for telnet...

CVE-2026-69431

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

EUVD-2026-72976

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69431

CVE-2026-69431 is a heap-based buffer overflow in Microsoft's Telnet Client that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (Critical) with a vector of network-accessible, low complexity, no privileges or user interaction r...