Information Disclosure Vulnerability in Thinkware U3000 TCP Service
CVE-2026-101055

6.9MEDIUM

Key Information:

Vendor: Thinkware
Status: U3000
Vendor: CVE Published:; 28 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-101055?

A significant security flaw has been identified in the Thinkware U3000, specifically in the TCP Service's GET_STATUS function. This vulnerability stems from improper handling of the 'wifi_info' argument, which allows for remote information disclosure to unauthorized users. Exploitation of this vulnerability could lead to sensitive data being accessed without proper authentication. The vulnerability affects all versions up to 1.02.04 and has been made publicly known, highlighting the necessity for prompt action from users to secure their devices. The vendor has not responded to disclosure attempts, raising concerns over user security.

Affected Version(s)

U3000 1.02.04

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-101055 - Proof of Concept