CVE-2026-115797Low· 3.7▾ SunlitA weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive informati…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.
F6 12.02.01.73Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115796Medium· 4.3Tenda F6 Web Management cross-site request forgery
CVE-2025-9828Low· 3.7A vulnerability was determined in Tenda CP6 11.10.00.243
CVE-2026-114268Critical· 9.9Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow
CVE-2026-113744Critical· 10.0Tenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow
CVE-2026-105778Critical· 9.9A vulnerability has been found in Tenda AC5 02.03.01.111_multi
CVE-2026-104610Critical· 10.0A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon