The vulnerability CVE-2026-101054 affects Thinkware U3000 up to version 1.02.04. It is caused by improper access controls in the get_file function of the TCP Service component, which handles the /tmp/wpa_supplicant.conf file. This weakness enables remote attackers to access or manipulate this file without proper authorization. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity, with attack vector network, low complexity, no privileges required, no user interaction, and low impact on confidentiality. Exploit code is publicly available, but there is no indication of active exploitation in the wild. The vendor was contacted but did not provide a response or patch.

Remote attackers can exploit this vulnerability without authentication or user interaction to bypass access controls on a sensitive configuration file (/tmp/wpa_supplicant.conf). This could lead to unauthorized access or manipulation of network configuration data. The impact on confidentiality is low, and there is no reported impact on integrity or availability.

No official patch or remediation has been provided by the vendor. Since the vendor did not respond to disclosure and no patch links are available, users should consider restricting network access to the affected device and monitor for suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance if it becomes available.