CVE-2026-101053 | Thinkware U3000 up to 1.02.04 TCP Service /tmp/wpa_supplicant.conf PUT_FILE path access control

September 27, 2026 Yanac

A vulnerability classified as critical was found in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa_supplicant.conf of the component TCP Service. Executing a manipulation of the argument path can lead to improper access controls.

The identification of this vulnerability is CVE-2026-101053. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More