CVE-2026-115796

MediumCVSS 4.3

Published: 23/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 23/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

A security flaw was discovered in Tenda F6 version 12.02.01.73 affecting an unknown function of the web management interface. Manipulation leads to cross-site request forgery, and the attack can be initiated remotely. A public exploit has been released and may be used in attacks.

Risk Assessment

An attacker could trick a logged-in administrator into performing unwanted actions in the device interface, potentially altering configuration or taking control of the router.

Recommendation

Update Tenda F6 firmware to the latest version if the vendor provides a fix, and restrict access to the management interface to trusted networks only.

Other vulnerabilities in Tenda F6

CVE-2026-115797Low
A weakness was identified in Tenda F6 version 12.02.01.73 affecting an unknown function of the web management interface. Manipulating the ecos_pw argument can lead to cleartext transmission of sensitive information. The attack may be launched remotely, is characterized by high complexity, and a public exploit is available.

Original NVD description (English source)

A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS