CVE-2026-7469
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A vulnerability was detected in Tenda 4G300 version US_4G300V1.0Mt_V1.01.42_CN_TDC01 affecting the sub_425A28 function of /goform/DelFil. Manipulation of the delflag argument results in command injection, and the attack may be launched remotely. The exploit is now public and may be used.
Risk Assessment
A remote attacker could execute arbitrary commands on the device, taking full control. This can lead to complete compromise of confidentiality, integrity, and availability of the network.
Recommendation
Update the Tenda 4G300 firmware to a non-vulnerable version or remove the device from public exposure. Restrict access to the management interface and monitor for unusual activity.
Other vulnerabilities in Tenda 4G300
See all- CVE-2026-19747Critical
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carried out remotely.
- CVE-2026-38063Critical
Tenda 5G03 version 5.03.02.04 (version 1.0) is vulnerable to command injection in the action_radio_on_with_ia_apn function via the ia parameter.
- CVE-2023-23080Critical
Certain Tenda products (CP7, CP3 v.10, IT7-PCS, IT7-LCS, IT7-PRS) are vulnerable to command injection. The vulnerability affects specific firmware versions listed in the description.
- CVE-2021-44971Critical
Multiple Tenda devices are vulnerable to authentication bypass, allowing an attacker to obtain sensitive information. This vulnerability can be combined with authenticated command injection to achieve remote code execution (RCE).
- CVE-2026-19749Low
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The RTSP/ONVIF component has missing authentication, allowing remote attacks, though the attack is considered difficult.
- CVE-2026-19748Low
A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. The function CWebSessionManager_ParseSession in /user/bin/Kylin of the Kylin Web Service component has insufficient entropy in the SESSION argument, allowing remote attacks, though difficult.
- CVE-2026-5685High
The Tenda CX12L router version 16.03.53.12 has a stack-based buffer overflow in the fromAddressNat function of /goform/addressNat. Manipulation of the page argument allows remote exploitation.
Original NVD description (English source)
A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the file /goform/DelFil. The manipulation of the argument delflag results in command injection. The attack may be launched remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS