CVE-2026-27513 is a CSRF vulnerability affecting the Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi. The web-based administrative interface does not implement anti-CSRF tokens or similar protections, allowing attackers to induce authenticated administrators to perform unintended actions that change router configuration. The vulnerability is rated medium severity with a CVSS 4.0 base score of 5.1, reflecting network attack vector, low complexity, no privileges required, but requiring user interaction. No patches or vendor advisories indicating fixes are currently available.

Successful exploitation allows an attacker to cause an authenticated administrator to unknowingly submit requests that alter router settings. This can lead to unauthorized configuration changes, potentially compromising network security or device functionality. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should limit access to the router's administrative interface, avoid visiting untrusted websites while logged in to the router interface, and consider using network segmentation or other controls to reduce exposure. Monitor vendor communications for updates regarding patches or official mitigations.