CVE-2026-82693— Tenda AC1206 Web UI telnet TendaTelnet missing authentication
Quick assessment
Affected
Tenda AC1206
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Tenda AC1206 固件版本 15.03.06.23 中被发现存在一个漏洞。该漏洞影响 Web UI 组件中 文件中的 函数。通过执行特定操作可导致缺失认证（即未经验证即可访问）。该漏洞可被远程利用，且其利用方式已公开披露，可能存在可用的攻击代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82693
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda AC1206 Web UI telnet TendaTelnet missing authentication
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-82693
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82693
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-82693 (1)
-
🔗 CVE-2026-82693 Tenda AC1206 Web UI telnet TendaTelnet missing authentication vdb-entry technical-description
Proof of Concept for CVE-2026-82693 (1)
Other References for CVE-2026-82693 (2)
-
🔗 CVE-2026-82693 in AC1206 third-party-advisory
-
Same Patch Batch · Tenda · 2026-08-31 · 3 CVEs total
| CVE-2026-82695 | 10.0 CRITICAL | Tenda AC18 Telnet telnet missing authentication |
| CVE-2026-82694 | 10.0 CRITICAL | Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication |
IV. Related Vulnerabilities
Same product: AC1206
-
CVE-2026-82694
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authen -
CVE-2026-19789
Tenda AC1206 httpd web management interface WifiGuestSet set -
CVE-2026-19788
Tenda AC1206 httpd web management interface SetOnlineDevName -
CVE-2026-0581
Tenda AC1206 httpd BehaviorManager formBehaviorManager comma -
CVE-2025-10432
Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed
Same vendor: Tenda
-
CVE-2026-82695
Tenda AC18 Telnet telnet missing authentication -
CVE-2026-82694
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authen -
CVE-2026-82542
Tenda HG10 Boa Web Server formIPv6Routing buffer overflow -
CVE-2026-78141
Tenda CH22 exeCommand formexeCommand command injection -
CVE-2026-78063
Tenda CH22 editFileName formeditFileName command injection
Same weakness: CWE-306
-
CVE-2026-82695
Tenda AC18 Telnet telnet missing authentication -
CVE-2026-82694
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authen -
CVE-2026-58574
PowerStore关键功能缺失认证可读取系统信息 -
CVE-2026-82641
keploy 3.1.0 through 3.6.25 Unauthenticated TLS Key Exposure -
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 Missing Authentication on
V. Comments for CVE-2026-82693
No comments yet