Vulnerabilities

TI-2026-21918 CVE-2026-27514 · GHSA-jqx8-f6x9-hm34

Tenda F3 Plaintext Credential Exposure in Configuration Download

LOW 31

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a sensitive information exposure vulnerability in the configuration download functionality.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00251 Published 2026-02-23 No fix listed CWE-201

TI-2026-21917 CVE-2026-27513 · GHSA-9hjg-4h75-mvc5

Tenda F3 CSRF in Web Management Interface

LOW 22

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00121 Published 2026-02-23 No fix listed CWE-352

TI-2026-21916 CVE-2026-27512 · GHSA-62pw-p3ph-rgh9

Tenda F3 Reflected Script Execution via Missing nosniff Header

LOW 23

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a content-type confusion vulnerability in the administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00218 Published 2026-02-23 No fix listed CWE-116

TI-2026-21915 CVE-2026-27511 · GHSA-q6w4-grhv-wcp8

Tenda F3 Clickjacking in Web Management Interface

LOW 23

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00246 Published 2026-02-23 No fix listed CWE-1021

TI-2025-35571 CVE-2025-57573 · GHSA-c333-fmq7-47x6

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the…

MEDIUM 58

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.0022 Published 2025-09-10 No fix listed CWE-120

TI-2025-35570 CVE-2025-57572 · GHSA-4673-7hc5-g7vp

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList…

MEDIUM 58

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the onlineList parameter in goform/setParentControl.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.0022 Published 2025-09-10 No fix listed CWE-120

TI-2025-35569 CVE-2025-57571 · GHSA-f6hv-x78h-r26x

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow.

MEDIUM 58

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00203 Published 2025-09-10 No fix listed CWE-120

TI-2025-35568 CVE-2025-57570 · GHSA-pj75-h34c-9543

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS.

MEDIUM 58

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00203 Published 2025-09-10 No fix listed CWE-120

TI-2025-35567 CVE-2025-57569 · GHSA-m9vf-59jv-295r

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.

MEDIUM 58

Tenda F3 V12.01.01.48_multi and after is vulnerable to Buffer Overflow via the portList parameter in /goform/setNAT.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00203 Published 2025-09-10 No fix listed CWE-120

TI-2020-17965 CVE-2020-35391 · GHSA-mfx7-787g-3rp3

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information…

HIGH 67

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14…

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.35248 Published 2021-01-01 No fix listed CWE-425

Vulnerabilities

Filters