Critical severity10.0NVD Advisory· Published Aug 31, 2026· Updated Aug 31, 2026

CVE-2026-82694

Description

A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dxz0069/Wavlink Wn530h4 Command Injection In Set Add Routingreferences
Tenda/AC1206llm-fuzzy
Range: 15.03.06.23

Patches

Vulnerability mechanics

References

github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TENDA-AC1206-ATE-DEFAULT-UNAUTH-002-vulndb.mdnvd
vuldb.com/cve/CVE-2026-82694nvd
vuldb.com/submit/894241nvd
vuldb.com/vuln/397182nvd
vuldb.com/vuln/397182/ctinvd
www.tenda.com.cnnvd

News mentions

Tenda Routers: Five Critical Vulnerabilities Including Hardcoded Credentials and Auth Bypass Disclosed Together
Vypr Intelligence · Aug 31, 2026

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000