CVE-2026-35905: T3 Technology CPE models T625Pro v1

Synopsis

A hardcoded root password vulnerability affects T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03. The flaw is reachable over the network with no authentication required, because the fixed "superadmin" credential is baked into the firmware and cannot be changed by normal configuration. Successful exploitation grants an attacker full root access to the device, enabling complete confidentiality loss, data tampering, and service disruption. No upstream fix has been published; HarborGuard tracks the advisory and will make a patched rebuild available the moment a fix is released.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The affected service is exposed over the network, meaning an attacker can reach it from the internet or any routable network path without requiring local or physical access.

• AuthenticationNot required

  The hardcoded "superadmin" credential is publicly known and embedded in the firmware, so no legitimate account or prior access is needed to authenticate as root.

• Victim interactionNot required

  Exploitation is fully attacker-driven and requires no action from any user or administrator on the target device.

• Attack complexityDetail

  Attack complexity is low: the exploit is reliable and condition-free, requiring only network access and knowledge of the fixed credential with no timing, race conditions, or environmental factors to overcome.

Blast Radius

• An attacker gains a root shell on the device, giving full control over all running processes and configuration.
• All data stored on or transmitted through the device becomes readable, including credentials, session tokens, and network traffic.
• An attacker can modify device configuration, routing rules, or firmware settings, persisting access or redirecting traffic.
• The device can be crashed or rendered permanently inoperable, disrupting connectivity for any downstream network segment it serves.