A vulnerability was identified in Tenda AC1206 15.03.06.23. (CVE-2026-82694)
Description
A critical vulnerability exists in the Tenda AC1206 firmware version 15.03.06.23 affecting the Web UI component. The flaw in the R7WebsSecurityHandler function of the /goform/ate endpoint allows remote attackers to bypass authentication. Exploit code is publicly available, increasing the risk of exploitation. The vulnerability has a maximum CVSS score of 10. No patch or remediation information is currently provided.
CVSS v3.1
Score 10.0critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Tenda AC1206 router firmware version 15.03.06.23 contains an authentication bypass vulnerability in the Web UI component, specifically in the R7WebsSecurityHandler function of the /goform/ate endpoint. This flaw allows unauthenticated remote attackers to gain unauthorized access. The vulnerability is tracked as CVE-2026-82694 and has a CVSS 3.1 base score of 10. Exploit code is publicly available, but there is no vendor advisory or patch information provided at this time.
Potential Impact
Successful exploitation leads to complete authentication bypass, granting attackers unauthorized access to the device's web interface with full confidentiality, integrity, and availability impact. This could allow full control over the device remotely.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device's web interface from untrusted networks and monitor for exploit attempts.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-79rc-8x3p-4wjw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-82694"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6a95bf04acd9273b496677a2
Added to database: 08/31/2026, 17:51:00 UTC
Last enriched: 09/07/2026, 22:37:38 UTC
Last updated: 10/15/2026, 18:48:24 UTC
Views: 109
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.