CVE-2026-115796: Tenda F6 Web Management cross-site request forgery
Published Oct 23, 2026
·Updated
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
1 affected component
Tenda F6=12.02.01.73
Event History
Oct 23, 2026
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The attacker must induce user interaction, consistent with the UI:R vector. The attack can be initiated remotely and does not require prior privileges.
2
Is a public exploit available?
Yes. The available data states that an exploit has been released publicly and may be used in attacks.
3
Which product version is identified as affected?
The reported affected version is Tenda F6 12.02.01.73. The available data does not identify other affected or fixed versions.