CVE-2026-11493— Tenda AC15 安全漏洞
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing Application新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-11493の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Tenda AC15 Samba smb.conf weak password
ソース: NVD (National Vulnerability Database)
脆弱性説明
A weakness has been identified in Tenda AC15 15.03.05.19. The impacted element is an unknown function of the file /etc_ro/smb.conf of the component Samba. Executing a manipulation can lead to weak password requirements. The attack is only possible within the local network. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made available to the public and could be used for attacks.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
弱口令要求
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Tenda AC15 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Tenda AC15是中国腾达（Tenda）公司的一款无线路由器。 Tenda AC15 15.03.05.19版本存在安全漏洞，该漏洞源于Samba组件中文件/etc_ro/smb.conf的错误操作，可能导致弱密码要求。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-11493の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-11493のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-11493 安全博客文章 (1)
Same Patch Batch · Tenda · 2026-06-08 · 12 CVEs total
| CVE-2026-11499 | 9.8 CRITICAL | Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow |
| CVE-2026-11557 | 8.8 HIGH | Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow |
| CVE-2026-11556 | 8.8 HIGH | Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection |
| CVE-2026-11553 | 8.8 HIGH | Tenda HG7HG9/HG10 formPPPEdit stack-based overflow |
| CVE-2026-11528 | 8.8 HIGH | Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow |
| CVE-2026-11524 | 8.8 HIGH | Tenda W20E Web Management modifyWifiFilterRules stack-based overflow |
| CVE-2026-11523 | 8.8 HIGH | Tenda W20E Web Management PortalAuth formPortalAuth stack-based overflow |
| CVE-2026-11522 | 8.8 HIGH | Tenda W20E setPortMirror formSetPortMirror stack-based overflow |
| CVE-2026-11504 | 8.8 HIGH | Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based o |
| CVE-2026-11503 | 8.8 HIGH | Tenda CX12L Wi-Fi Configuration Endpoint fast_setting_wifi_set form_fast_setting_wifi_set |
| CVE-2026-11498 | 8.8 HIGH | Tenda HG7HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow |
IV. 関連脆弱性
同じ製品: AC15
- CVE-2026-5830
Tenda AC15 SysToolChangePwd websGetVar stack-based overflow - CVE-2026-4975
Tenda AC15 POST Request setcfm formSetCfm memory corruption - CVE-2026-3400
Tenda AC15 TextEditingConversion stack-based overflow - CVE-2025-11389
Tenda AC15 saveAutoQos stack-based overflow - CVE-2025-11388
Tenda AC15 setNotUpgrade stack-based overflow
同じベンダー: Tenda
- CVE-2026-11557
Tenda F451 Web Management Natlimit fromNatlimit stack-based - CVE-2026-11556
Tenda F451 Web Management WriteFacMac formWriteFacMac os com - CVE-2026-11553
Tenda HG7HG9/HG10 formPPPEdit stack-based overflow - CVE-2026-11528
Tenda AC18 Web Management getRebootStatus sub_45304 stack-ba - CVE-2026-11524
Tenda W20E Web Management modifyWifiFilterRules stack-based
同じ弱点: CWE-521
- CVE-2024-40684
IBM Operations Analytics - Log Analysis is affected by Weak - CVE-2026-9394
Besen BS20 EV Charging Station Bluetooth Low Energy weak pas - CVE-2026-41038
Weak Password Policy Vulnerability in Quantum Networks Route - CVE-2026-6284
Horner Automation Cscape and XL4, XL7 PLC Weak password requ - CVE-2026-33771
CTP OS: Configuring password requirements does not work whic
V. CVE-2026-11493へのコメント
まだコメントはありません