Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-27513

Tenda F3 CSRF in Web Management Interface

Description

Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a cross-site request forgery (CSRF) vulnerability in the web-based administrative interface. The interface does not implement anti-CSRF protections, allowing an attacker to induce an authenticated administrator to submit state-changing requests, which can result in unauthorized configuration changes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shenzhen Tenda Technology Co., Ltd. Tenda F3

Default version status: unknown

  • 0 to ≤ 12.01.01.55_multiaffected

References