CyberSecBulletin

Kenwood vulnerabilities

We track 4 vulnerabilities in Kenwood products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.

4vulnerabilities
0critical
4high
0exploited
8.1average CVSS score

Latest Kenwood vulnerabilities

  • 7.8 High severity

    DNR1007XR: Incorrect Permission Assignment for Critical Resource

    CVE-2026-18270Kenwood

    Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the abilit

  • 7.0 High severity

    DNR1007XR: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-18268Kenwood

    Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to exe

  • 8.8 High severity

    DMX958XR: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-8654Kenwood

    Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit

  • 8.8 High severity

    DMX958XR: Stack-based Buffer Overflow

    CVE-2025-8653Kenwood

    Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR. Authentication is not required to exp