Vulnerability Intelligence Report
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
CVE-2026-82694
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.
Authentication Bypass
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Tenda | AC1206 | 15.03.06.23 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Vulnerability Class
Authentication Bypass
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | VulDB · Researcher · Switzerland |
| Reserved | 2026-08-30T17:42:07 |
| Published | 2026-08-31T12:30:10 |
| Last Updated | 2026-08-31T17:44:30 |
Community Chatter & Buzz