Local Privilege Escalation Vulnerability in Kenwood DNR1007XR Devices

CVE-2026-18273

What is CVE-2026-18273?

The Kenwood DNR1007XR device is vulnerable due to incorrect default permissions set on the USB filesystem's mount point. This flaw permits physically present attackers, who can execute low-privileged code, to escalate their access privileges. By leveraging this vulnerability, an attacker can execute arbitrary code as the root user, posing significant security risks to the device and potentially compromising sensitive data.

References