CVE-2026-10045 CVE-2026-10045
Attackers can exploit hardcoded credentials and default telnet access on the DR300 router to read/write memory, modify firmware, and inspect network connections.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-10045?
CVE-2026-10045 is a critical vulnerability in Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd DR300, published on 9 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash, inspect active connections, and view currently connected devices.
Which versions are affected by CVE-2026-10045?
How do I fix CVE-2026-10045?
No fix has been published for CVE-2026-10045 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-10045 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-10045 exists.
Sources
Also known as GHSA-8rf8-hpj2-cpgg.