CVE-2026-115797: Cleartext Transmission of Sensitive Information in Tenda F6
Description
CVE-2026-115797 is a vulnerability in the Tenda F6 router's Web Management Interface version 12.02.01.73. It involves cleartext transmission of sensitive information due to manipulation of the ecos_pw argument. The vulnerability can be exploited remotely but requires high complexity and is considered difficult to exploit. No patch information is provided. The CVSS score is 6.3, indicating a medium severity risk.
CVSS v4.0
Score 6.3medium
Affected software
Tenda
F6
cpe:2.3:h:tenda:f6:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the Tenda F6 router, specifically version 12.02.01.73, in its Web Management Interface component. An attacker can manipulate the ecos_pw argument to cause sensitive information to be transmitted in cleartext. The attack vector is network-based with no privileges or user interaction required, but the attack complexity is high. The vulnerability does not allow for integrity or availability impact, only confidentiality is affected with low impact. Exploit code is publicly available, but exploitation is difficult.
Potential Impact
Sensitive information can be exposed in cleartext over the network, potentially allowing an attacker to intercept confidential data. However, the attack complexity is high and no known exploits are reported in the wild. The vulnerability does not affect system integrity or availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the lack of an official fix or patch information, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-23T14:57:47.218Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6adbbe27d73cc49347b8fb5f
Added to database: 10/23/2026, 20:05:59 UTC
Last enriched: 10/23/2026, 20:20:42 UTC
Last updated: 10/23/2026, 20:25:05 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.