CVE-2026-6274 is an improper authentication vulnerability (CWE-287) in the Redline WR3200 device by DTS Electronics Industry and Trade Ltd. Co. It affects firmware versions starting at 7.1.3 up to but not including 7.1.8. The vulnerability arises from missing or weak authentication controls on critical functions, allowing unauthorized users to access functionality that should be protected by ACLs. The CVSS 3.1 score of 9.8 reflects its critical severity with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the provided data.

Successful exploitation of this vulnerability allows an unauthenticated attacker to access and potentially control critical device functions without proper authorization. This can lead to complete compromise of the device’s confidentiality, integrity, and availability, severely impacting network security and device operation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device to trusted users only and monitor for unusual activity. Avoid exposing the device directly to untrusted networks.