CVE-2026-126722

{
  "etk_id": "ETK-2026-4192",
  "cve_id": "CVE-2026-126722",
  "display_id": "CVE-2026-126722",
  "ghsa_id": "GHSA-cx8c-x79c-m94m",
  "euvd_id": "EUVD-2026-123584",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Hidden telnet backdoor in Rooxis RXR-12",
  "summary": "Rooxis RXR-12 firmware before 20260813_c2169ea5 includes an undocumented service that can enable telnet access. An attacker able to reach the router's UDP listener can activate that service and obtain root access using the device's default telnet credentials.",
  "mitigation": "Update Rooxis RXR-12 firmware to 20260813_c2169ea5 through the local web interface. Restrict untrusted network access to the router until the update is installed.",
  "vendor": "Rooxis",
  "product": "Rooxis RXR-12",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 20260813_c2169ea5"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "20260813_c2169ea5"
      ],
      "package_name": "Rooxis RXR-12",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 17.382326883333334,
  "t0_at": "2026-11-11T16:41:42.039000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-11T16:41:42.039000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T16:41:42.039000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-126722"
    }
  }
}