CVE-2026-115797

Tenda F6 Web Management cleartext transmission

LOW 2.9EPSS 0.2%

A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been made available to the public and could be used for attacks.

Affected: Tenda · F6
CVSS v4.0 VULDB: 2.9 LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB: 3.7 LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v2.0 VULDB: 2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS: 0.20% chance of exploitation in the next 30 days, 10th percentile
Published: 2026-10-23
Updated: 2026-10-29

Proof-of-concept exploits (1)

0xWKZER/tenda-f6-vulnerabilities/edit/main/02-Cleartext_Transmission.mdRepo stars 0★ · pushed 2026-10-09 · find archive

CVE references

https://vuldb.com/cve/CVE-2026-115797ADVISORY
https://vuldb.com/submit/1022076ADVISORY
https://vuldb.com/vuln/425975REFERENCE
https://vuldb.com/vuln/425975/ctiREFERENCE
https://www.tenda.com.cnREFERENCE

CVE-2026-115797

Proof-of-concept exploits (1)

CVE references

References

Related