CVE-2026-82693

A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 4.0 10.0 Critical

Status

Deferred - cna@vuldb.com

Published

2026-08-31

Last modified

2026-08-31

Weaknesses

CWE-287, CWE-306

Affected products

• Ac1206 Firmware (Tenda)

References

• https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TENDA-AC1206-TELNET-DEFAULT-U…
• https://vuldb.com/cve/CVE-2026-82693
• https://vuldb.com/submit/894235
• https://vuldb.com/vuln/397181
• https://vuldb.com/vuln/397181/cti
• https://www.tenda.com.cn/