CVE-2026-115796: Cross-Site Request Forgery in Tenda F6
Description
CVE-2026-115796 is a medium severity cross-site request forgery (CSRF) vulnerability in the Web Management Interface of Tenda F6 router firmware version 12.02.01.73. The flaw allows remote attackers to perform unauthorized actions via crafted requests. Exploit code has been publicly released. No patch or remediation information is currently available.
CVSS v4.0
Score 5.3medium
Affected software
Tenda
F6
cpe:2.3:h:tenda:f6:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Tenda F6 router firmware version 12.02.01.73. It is a cross-site request forgery (CSRF) issue in an unspecified function of the Web Management Interface component. An attacker can remotely induce a victim to execute unwanted actions on the device by tricking them into submitting crafted requests. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Public exploit code is available, but no official patch or vendor advisory has been provided to confirm remediation status.
Potential Impact
Successful exploitation allows remote attackers to perform unauthorized state-changing operations on the affected device's web management interface without user consent. This could lead to configuration changes or other unintended actions. The vulnerability requires user interaction (UI:P) and has low impact on confidentiality and integrity but may affect availability minimally.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit access to the device's web management interface and avoid interacting with untrusted web content that could trigger CSRF attacks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-23T14:57:43.016Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6adbbe27d73cc49347b8fb68
Added to database: 10/23/2026, 20:05:59 UTC
Last enriched: 10/23/2026, 20:20:26 UTC
Last updated: 10/23/2026, 20:25:04 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.