← Back to feed

Pre-auth admin takeover on 28 Xiaomi/Redmi routers via hardcoded key

IT·安全 · 2026-10-28 16:49

A GitHub disclosure reveals a hardcoded key vulnerability affecting 28 Xiaomi and Redmi router models, including the AX3000T, allowing attackers to gain admin privileges without authentication. The flaw is rated high severity.

Source: github.com


Auto-generated summary for reference only. RSS