{"id":"CVE-2026-115796","published":"2026-10-23T20:17:21.507","lastModified":"2026-10-26T13:41:11.497","description":"A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwes":["CWE-352","CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://github.com/0xWKZER/tenda-f6-vulnerabilities/blob/main/01-csrf.md","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-115796","tags":[]},{"url":"https://vuldb.com/submit/1022074","tags":[]},{"url":"https://vuldb.com/vuln/425974","tags":[]},{"url":"https://vuldb.com/vuln/425974/cti","tags":[]},{"url":"https://www.tenda.com.cn/","tags":[]}],"exploitRefs":[{"url":"https://github.com/0xWKZER/tenda-f6-vulnerabilities/blob/main/01-csrf.md","tags":[]}],"hasPoc":true,"ai":null}