Vulnerabilities

TI-2026-15026 CVE-2026-18273 · GHSA-cf99-wgcf-8gw4

Incorrect default permissions in Kenwood DNR1007XR

LOW 31

Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability.

CVSS 3.0MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00212 Published 2026-08-20 No fix listed CWE-276

TI-2026-15025 CVE-2026-18272 · GHSA-gqgc-2qvm-j37v

LOW 36

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.01746 Published 2026-08-20 No fix listed CWE-78

TI-2026-15024 CVE-2026-18271 · GHSA-wcpw-j6pq-wqgp

LOW 32

Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.0039 Published 2026-08-20 No fix listed CWE-122

TI-2026-15023 CVE-2026-18270 · GHSA-63gg-qx43-wj9g

LOW 35

Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00153 Published 2026-08-20 No fix listed CWE-732

TI-2026-15022 CVE-2026-18269 · GHSA-wg99-wchc-fc9x

LOW 32

Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00361 Published 2026-08-20 No fix listed CWE-787

TI-2026-15021 CVE-2026-18268 · GHSA-wc8p-vc98-chj3

LOW 34

Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00832 Published 2026-08-20 No fix listed CWE-78

TI-2026-15020 CVE-2026-18267 · GHSA-wvhf-6gm4-v6jf

LOW 32

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00419 Published 2026-08-20 No fix listed CWE-59