by Kastro
Paper/Archive/CVE-2026-10045

CVE-2026-10045

Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd DR300 — CVE-2026-10045

EPSS 0.2%public exploitCVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 11.0.110 × 202.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, inspect active connections, and view currently connected devices.

Affected

ProductAffectedFixed inSource
DR3002.1.2.121–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitrubenabreu.xyz/post/temu-routers-and-their-implications