CVE-2026-2147
A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
- Score
- CVSS 4.0 6.9 Medium
- Status
- Analyzed - cna@vuldb.com
- Published
- 2026-02-08
- Last modified
- 2026-02-23
- Weaknesses
- CWE-200, CWE-284
Affected products
References
- https://github.com/master-abc/cve/issues/30
- https://vuldb.com/?ctiid.344849
- https://vuldb.com/?id.344849
- https://vuldb.com/?submit.747429
- https://www.tenda.com.cn/
